@dynamic-labs-sdk/client 1.19.1 → 1.21.0

package/dist/isMfaRequiredForAction-CHeYEkjj.cjs

@@ -1,430 +0,0 @@
-//#region rolldown:runtime
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-	if (from && typeof from === "object" || typeof from === "function") {
-		for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
-			key = keys[i];
-			if (!__hasOwnProp.call(to, key) && key !== except) {
-				__defProp(to, key, {
-					get: ((k) => from[k]).bind(null, key),
-					enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-				});
-			}
-		}
-	}
-	return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
-	value: mod,
-	enumerable: true
-}) : target, mod));
-
-//#endregion
-const require_updateAuthFromVerifyResponse = require('./updateAuthFromVerifyResponse-CY0xTIXF.cjs');
-let zod_mini = require("zod/mini");
-zod_mini = __toESM(zod_mini);
-
-//#region src/utils/retryOnFail/InvalidRetryOnFailCallError.ts
-/**
-* This error is thrown when the `retryOnFail` function is called with an invalid
-* number of retries (i.e. less than 0).
-*/
-var InvalidRetryOnFailCallError = class extends require_updateAuthFromVerifyResponse.BaseError {
-	constructor(maxRetries) {
-		super({
-			cause: null,
-			code: "invalid_retry_on_fail_call_error",
-			docsUrl: null,
-			name: "InvalidRetryOnFailCallError",
-			shortMessage: `Invalid retries parameter for retryOnFail call: ${maxRetries}`
-		});
-	}
-};
-
-//#endregion
-//#region src/utils/retryOnFail/retryOnFail.ts
-/** @notInstrumented */
-const retryOnFail = async ({ delay = 0, fn, maxRetries }) => {
-	for (let retry = 0; retry <= maxRetries; retry++) try {
-		return await fn();
-	} catch (error) {
-		if (retry >= maxRetries) throw error;
-		if (delay > 0) await new Promise((resolve) => setTimeout(resolve, delay));
-	}
-	/**
-	* Reaching this point should never happen and this
-	* error is thrown to help us debug the issue.
-	*/
-	throw new InvalidRetryOnFailCallError(maxRetries);
-};
-
-//#endregion
-//#region src/modules/auth/isSignedIn/isSignedIn.ts
-/**
-* Checks if the user is currently signed in to the Dynamic client.
-*
-* The client is considered to be in a signed in state if a user has
-* authenticated or if the client has at least one wallet connected.
-*
-* @deprecated What counts as "signed in" is your app's business logic, not the
-* SDK's. This helper bakes in one opinion (a user OR any connected wallet),
-* which rarely matches every app and forces a dependency on us for every
-* variation. Compose your own check from the underlying primitives instead —
-* e.g. `Boolean(client.user) || isAnyWalletAccountConnected(client)` — and
-* layer in whatever your app requires (device registration, completed
-* onboarding, satisfied MFA, a required embedded wallet, …). See the
-* "Check if signed in" guide:
-* https://www.dynamic.xyz/docs/javascript/user-session-management
-*
-* @example
-* ```ts
-* if (isSignedIn()) {
-*   console.log('User is authenticated or has a wallet connected');
-* }
-* ```
-*
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns True if the user is signed in, false otherwise.
-* @see logout
-* @see isAnyWalletAccountConnected
-* @notInstrumented
-*/
-const isSignedIn = (client = require_updateAuthFromVerifyResponse.getDefaultClient()) => Boolean(client.user || require_updateAuthFromVerifyResponse.getWalletAccounts(client).length > 0);
-
-//#endregion
-//#region src/services/storage/createStorageKeySchema/createStorageKeySchema.ts
-/** @notInstrumented */
-const createStorageKeySchema = (params) => {
-	return params;
-};
-
-//#endregion
-//#region src/modules/projectSettings/fetchProjectSettings/projectSettingsExpirationScheme.ts
-/**
-* The schema to track the expiration time of the project settings.
-*/
-const projectSettingsExpirationStorageKeySchema = createStorageKeySchema({
-	key: "projectSettingsExpiration",
-	schema: zod_mini.number()
-});
-
-//#endregion
-//#region src/modules/projectSettings/fetchProjectSettings/fetchProjectSettings.ts
-/**
-* Expiration time of the project settings in milliseconds.
-*/
-const PROJECT_SETTINGS_EXPIRATION_TIME = 1e3 * 60 * 5;
-/**
-* Fetches and updates the project settings from the API.
-*
-* This function retrieves the latest project configuration settings
-* from Dynamic's servers, including authentication options, enabled chains,
-* and security configurations. The settings are cached for performance.
-*
-* @example
-* ```ts
-* const settings = await fetchProjectSettings();
-* console.log('Enabled chains:', settings.chains);
-* ```
-*
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns A promise that resolves to the updated project settings.
-* @see createDynamicClient
-* @see initializeClient
-* @notInstrumented
-* @noHook Internal settings fetch that is not part of the public hook surface.
-*/
-const fetchProjectSettings = async (client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
-	const core = require_updateAuthFromVerifyResponse.getCore(client);
-	const currentExpiration = await core.storage.getItem(projectSettingsExpirationStorageKeySchema);
-	if (Boolean(client.projectSettings) && !(currentExpiration && currentExpiration < Date.now()) && isSignedIn(client)) return client.projectSettings;
-	const apiClient = require_updateAuthFromVerifyResponse.createApiClient({}, client);
-	core.logger.debug("[fetchProjectSettings] Fetching project settings...");
-	const doFetch = async () => apiClient.getEnvironmentSettings({
-		environmentId: core.environmentId,
-		sdkVersion: `${require_updateAuthFromVerifyResponse.CLIENT_SDK_NAME}/${core.version}`
-	}, { credentials: "omit" });
-	const projectSettings = await retryOnFail({
-		fn: doFetch,
-		maxRetries: 2
-	});
-	core.state.set({ projectSettings: projectSettings ?? null });
-	await core.storage.setItem(projectSettingsExpirationStorageKeySchema, Date.now() + PROJECT_SETTINGS_EXPIRATION_TIME);
-	return projectSettings;
-};
-
-//#endregion
-//#region src/modules/sessionKeys/generateSessionKeys/generateSessionKeys.ts
-/** @notInstrumented */
-const generateSessionKeys = async (client) => {
-	const core = require_updateAuthFromVerifyResponse.getCore(client);
-	const currentState = core.state.get();
-	const isRotation = Boolean(currentState.sessionKeys);
-	const logContext = {
-		environmentId: core.environmentId,
-		operation: isRotation ? "rotate" : "create",
-		userId: currentState.user?.id ?? null
-	};
-	core.logger.info(isRotation ? "[generateSessionKeys] Rotating session key..." : "[generateSessionKeys] Creating session key...", logContext);
-	await core.keychain.removeKey("session");
-	const publicKey = await core.keychain.generateKey("session");
-	require_updateAuthFromVerifyResponse.assertDefined(publicKey, "Public key not found");
-	core.state.set({ sessionKeys: publicKey });
-	core.logger.info(isRotation ? "[generateSessionKeys] Session key rotated" : "[generateSessionKeys] Session key created", logContext);
-	return { publicKey };
-};
-
-//#endregion
-//#region src/modules/wallets/utils/getAvailableWalletProvidersFromWalletAccounts/getAvailableWalletProvidersFromWalletAccounts.ts
-/** @notInstrumented */
-const getAvailableWalletProvidersFromWalletAccounts = (client) => {
-	const core = require_updateAuthFromVerifyResponse.getCore(client);
-	const walletProvidersMap = /* @__PURE__ */ new Map();
-	require_updateAuthFromVerifyResponse.getWalletAccounts(client).forEach((walletAccount) => {
-		if (walletProvidersMap.has(walletAccount.walletProviderKey)) return;
-		try {
-			const walletProvider = require_updateAuthFromVerifyResponse.getWalletProviderFromWalletAccount({ walletAccount }, client);
-			walletProvidersMap.set(walletAccount.walletProviderKey, walletProvider);
-		} catch (error) {
-			core.logger.debug("Wallet provider not found for wallet account", {
-				error,
-				walletAccount: walletAccount.address
-			});
-		}
-	});
-	return Array.from(walletProvidersMap.values());
-};
-
-//#endregion
-//#region src/modules/wallets/destroyWalletProviders/destroyWalletProviders.ts
-/**
-* Tear down every wallet provider on the client.
-*
-* Each provider's `destroy` is responsible for its own local + remote
-* cleanup. We swallow errors so a failing destroy on one provider does not
-* block teardown of the others (e.g. during logout).
-*
-* @notInstrumented
-*/
-const destroyWalletProviders = async ({ reason }, client) => {
-	const core = require_updateAuthFromVerifyResponse.getCore(client);
-	const walletProviders = getAvailableWalletProvidersFromWalletAccounts(client);
-	await Promise.all(walletProviders.map(async (walletProvider) => {
-		if (!walletProvider.destroy) return;
-		try {
-			await walletProvider.destroy({ reason });
-		} catch (err) {
-			core.logger.error(`Error destroying wallet provider ${walletProvider.key}`, err);
-		}
-	}));
-};
-
-//#endregion
-//#region src/modules/auth/logoutWithReason/logoutWithReason.ts
-/**
-* Logs the user out with an explicit reason.
-*
-* Revokes the session, clears auth state, terminates wallet providers, and
-* emits the `logout` client event with the given reason. The reason is also
-* captured as an argument on the function-instrumentation event, which is
-* how Datadog distinguishes between different logout causes.
-*
-* Use this instead of the public `logout` when triggering a logout from
-* internal or extension code — the caller owns the reason string, so the
-* telemetry correctly attributes *why* the logout happened.
-*
-* @param params - The logout params.
-* @param params.reason - Why the logout is being triggered. Extension authors
-*   needing a reason outside the SDK catalog can cast with `as LogoutReason`.
-* @param client - The Dynamic client instance.
-* @instrumented
-*/
-const logoutWithReason = async ({ reason }, client) => {
-	const core = require_updateAuthFromVerifyResponse.getCore(client);
-	core.logger.debug("[logoutWithReason] Logging out...", { reason });
-	await destroyWalletProviders({ reason }, client);
-	if (client.user !== null) {
-		const apiClient = require_updateAuthFromVerifyResponse.createApiClient({}, client);
-		try {
-			await apiClient.revokeSession({ environmentId: core.environmentId });
-		} catch (error) {
-			core.logger.error("Failed to revoke session", error);
-		}
-		/**
-		* This deletes the auth cookie if it exists.
-		* If the cookie doesn't exist, this sets a new cookie that expires immediately.
-		*/
-		if (require_updateAuthFromVerifyResponse.isCookieEnabled(client)) require_updateAuthFromVerifyResponse.setCookie(`${require_updateAuthFromVerifyResponse.DYNAMIC_AUTH_COOKIE_NAME}=; Max-Age=-99999999; path=/; SameSite=Lax${require_updateAuthFromVerifyResponse.getSecureCookieAttribute()}`);
-	}
-	await core.keychain.removeKey("session");
-	core.state.set({
-		captchaToken: null,
-		elevatedAccessTokens: [],
-		legacyToken: null,
-		mfaToken: null,
-		sessionExpiresAt: null,
-		sessionKeys: null,
-		token: null,
-		unverifiedWalletAccounts: [],
-		user: null
-	});
-	require_updateAuthFromVerifyResponse.emitEvent({
-		args: { reason },
-		event: "logout"
-	}, client);
-	fetchProjectSettings(client);
-	generateSessionKeys(client);
-};
-const __logoutWithReason_impl = logoutWithReason;
-const __logoutWithReason_wrapped = require_updateAuthFromVerifyResponse.instrumentFunction({
-	fn: __logoutWithReason_impl,
-	functionName: "logoutWithReason",
-	getCore: () => {
-		try {
-			return require_updateAuthFromVerifyResponse.getCore(require_updateAuthFromVerifyResponse.getDefaultClient());
-		} catch {
-			return;
-		}
-	}
-});
-
-//#endregion
-//#region src/modules/mfa/consumeMfaToken/consumeMfaToken.ts
-/**
-* Consumes and clears the current MFA token from the client state.
-*
-* This function retrieves the MFA token obtained from a successful MFA authentication,
-* and removes it from the client, to prevent it from being used again.
-*
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns The MFA token that was consumed.
-* @throws Error if no MFA token is found.
-* @instrumented
-*/
-const consumeMfaToken = (client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
-	const core = require_updateAuthFromVerifyResponse.getCore(client);
-	const mfaToken = core.state.get().mfaToken;
-	require_updateAuthFromVerifyResponse.assertDefined(mfaToken, "No MFA token found");
-	core.state.set({ mfaToken: null });
-	return mfaToken;
-};
-const __consumeMfaToken_impl = consumeMfaToken;
-const __consumeMfaToken_wrapped = require_updateAuthFromVerifyResponse.instrumentFunction({
-	fn: __consumeMfaToken_impl,
-	functionName: "consumeMfaToken",
-	getCore: () => {
-		try {
-			return require_updateAuthFromVerifyResponse.getCore(require_updateAuthFromVerifyResponse.getDefaultClient());
-		} catch {
-			return;
-		}
-	}
-});
-
-//#endregion
-//#region src/modules/mfa/getMfaMethods/getMfaMethods.ts
-/**
-* Retrieves the available MFA methods for the current user.
-*
-* This function fetches information about which multi-factor authentication
-* methods are available and configured for the user's account.
-*
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns A promise that resolves to the user's MFA methods configuration.
-* @notInstrumented
-*/
-const getMfaMethods = async (client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
-	const core = require_updateAuthFromVerifyResponse.getCore(client);
-	return await require_updateAuthFromVerifyResponse.createApiClient({}, client).getUserMfaMethods({
-		environmentId: core.environmentId,
-		verifiedOnly: true
-	});
-};
-
-//#endregion
-//#region src/modules/mfa/isMfaRequiredForAction/isMfaRequiredForAction.ts
-/**
-* Checks if MFA is required for a specific action.
-*
-* This function determines whether multi-factor authentication is required
-* for the specified action based on project settings and user configuration.
-*
-* @param params.mfaAction - The action to check MFA requirements for.
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns A promise that resolves to true if MFA is required for the action, false otherwise.
-* @notInstrumented
-*/
-const isMfaRequiredForAction = async ({ mfaAction }, client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
-	const projectSettings = client.projectSettings;
-	if (!projectSettings?.security?.mfa?.actions?.some((action) => action.action === mfaAction && action.required)) return false;
-	if (projectSettings?.security?.mfa?.required) return true;
-	return (await getMfaMethods(client)).userHasVerifiedMfaMethods;
-};
-
-//#endregion
-Object.defineProperty(exports, '__consumeMfaToken_wrapped', {
-  enumerable: true,
-  get: function () {
-    return __consumeMfaToken_wrapped;
-  }
-});
-Object.defineProperty(exports, '__logoutWithReason_wrapped', {
-  enumerable: true,
-  get: function () {
-    return __logoutWithReason_wrapped;
-  }
-});
-Object.defineProperty(exports, '__toESM', {
-  enumerable: true,
-  get: function () {
-    return __toESM;
-  }
-});
-Object.defineProperty(exports, 'createStorageKeySchema', {
-  enumerable: true,
-  get: function () {
-    return createStorageKeySchema;
-  }
-});
-Object.defineProperty(exports, 'fetchProjectSettings', {
-  enumerable: true,
-  get: function () {
-    return fetchProjectSettings;
-  }
-});
-Object.defineProperty(exports, 'generateSessionKeys', {
-  enumerable: true,
-  get: function () {
-    return generateSessionKeys;
-  }
-});
-Object.defineProperty(exports, 'getMfaMethods', {
-  enumerable: true,
-  get: function () {
-    return getMfaMethods;
-  }
-});
-Object.defineProperty(exports, 'isMfaRequiredForAction', {
-  enumerable: true,
-  get: function () {
-    return isMfaRequiredForAction;
-  }
-});
-Object.defineProperty(exports, 'isSignedIn', {
-  enumerable: true,
-  get: function () {
-    return isSignedIn;
-  }
-});
-Object.defineProperty(exports, 'retryOnFail', {
-  enumerable: true,
-  get: function () {
-    return retryOnFail;
-  }
-});
-//# sourceMappingURL=isMfaRequiredForAction-CHeYEkjj.cjs.map

package/dist/isMfaRequiredForAction-CHeYEkjj.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"isMfaRequiredForAction-CHeYEkjj.cjs","names":["BaseError","getDefaultClient","getWalletAccounts","z","getDefaultClient","getCore","createApiClient","CLIENT_SDK_NAME","getCore","getCore","walletProvidersMap: Map<string, WalletProvider>","getWalletAccounts","getWalletProviderFromWalletAccount","getCore","getDefaultClient","getCore","createApiClient","getDefaultClient"],"sources":["../src/utils/retryOnFail/InvalidRetryOnFailCallError.ts","../src/utils/retryOnFail/retryOnFail.ts","../src/modules/auth/isSignedIn/isSignedIn.ts","../src/services/storage/createStorageKeySchema/createStorageKeySchema.ts","../src/modules/projectSettings/fetchProjectSettings/projectSettingsExpirationScheme.ts","../src/modules/projectSettings/fetchProjectSettings/fetchProjectSettings.ts","../src/modules/sessionKeys/generateSessionKeys/generateSessionKeys.ts","../src/modules/wallets/utils/getAvailableWalletProvidersFromWalletAccounts/getAvailableWalletProvidersFromWalletAccounts.ts","../src/modules/wallets/destroyWalletProviders/destroyWalletProviders.ts","../src/modules/auth/logoutWithReason/logoutWithReason.ts","../src/modules/mfa/consumeMfaToken/consumeMfaToken.ts","../src/modules/mfa/getMfaMethods/getMfaMethods.ts","../src/modules/mfa/isMfaRequiredForAction/isMfaRequiredForAction.ts"],"sourcesContent":["import { BaseError } from '../../errors/base';\n\n/**\n * This error is thrown when the `retryOnFail` function is called with an invalid\n * number of retries (i.e. less than 0).\n */\nexport class InvalidRetryOnFailCallError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(maxRetries: number) {\n    super({\n      cause: null,\n      code: 'invalid_retry_on_fail_call_error',\n      docsUrl: null,\n      name: 'InvalidRetryOnFailCallError',\n      shortMessage: `Invalid retries parameter for retryOnFail call: ${maxRetries}`,\n    });\n  }\n}\n","import { InvalidRetryOnFailCallError } from './InvalidRetryOnFailCallError';\n\nexport type RetryOnFailParams<T> = {\n  /**\n   * The delay between retries in milliseconds.\n   */\n  delay?: number;\n  /**\n   * The function to call.\n   */\n  fn: () => Promise<T>;\n  /**\n   * The maximum number of retries.\n   *\n   * When set to 0, the function will be called only once and is\n   * therefore equivalent to calling the function directly.\n   */\n  maxRetries: number;\n};\n\n/** @notInstrumented */\nexport const retryOnFail = async <T>({\n  delay = 0,\n  fn,\n  maxRetries,\n}: RetryOnFailParams<T>) => {\n  for (let retry = 0; retry <= maxRetries; retry++) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (retry >= maxRetries) {\n        throw error;\n      }\n\n      if (delay > 0) {\n        await new Promise((resolve) => setTimeout(resolve, delay));\n      }\n    }\n  }\n\n  /**\n   * Reaching this point should never happen and this\n   * error is thrown to help us debug the issue.\n   */\n  throw new InvalidRetryOnFailCallError(maxRetries);\n};\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { getWalletAccounts } from '../../wallets/getWalletAccounts';\n\n/**\n * Checks if the user is currently signed in to the Dynamic client.\n *\n * The client is considered to be in a signed in state if a user has\n * authenticated or if the client has at least one wallet connected.\n *\n * @deprecated What counts as \"signed in\" is your app's business logic, not the\n * SDK's. This helper bakes in one opinion (a user OR any connected wallet),\n * which rarely matches every app and forces a dependency on us for every\n * variation. Compose your own check from the underlying primitives instead —\n * e.g. `Boolean(client.user) || isAnyWalletAccountConnected(client)` — and\n * layer in whatever your app requires (device registration, completed\n * onboarding, satisfied MFA, a required embedded wallet, …). See the\n * \"Check if signed in\" guide:\n * https://www.dynamic.xyz/docs/javascript/user-session-management\n *\n * @example\n * ```ts\n * if (isSignedIn()) {\n *   console.log('User is authenticated or has a wallet connected');\n * }\n * ```\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if the user is signed in, false otherwise.\n * @see logout\n * @see isAnyWalletAccountConnected\n * @notInstrumented\n */\nexport const isSignedIn = (client = getDefaultClient()) =>\n  Boolean(client.user || getWalletAccounts(client).length > 0);\n","import type * as z from 'zod/mini';\n\nimport type { StorageKeySchema, StorageKeySchemaConfig } from '../storage.types';\n\n/** @notInstrumented */\nexport const createStorageKeySchema = <T>(params: {\n  config?: StorageKeySchemaConfig;\n  key: string;\n  schema: z.ZodMiniType<T>;\n}): StorageKeySchema<T> => {\n  return params;\n};\n","import * as z from 'zod/mini';\n\nimport { createStorageKeySchema } from '../../../services/storage';\n\n/**\n * The schema to track the expiration time of the project settings.\n */\nexport const projectSettingsExpirationStorageKeySchema = createStorageKeySchema(\n  {\n    key: 'projectSettingsExpiration',\n    schema: z.number(),\n  }\n);\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { retryOnFail } from '../../../utils/retryOnFail';\nimport { createApiClient } from '../../apiClient';\nimport { CLIENT_SDK_NAME } from '../../apiClient/constants';\nimport { isSignedIn } from '../../auth/isSignedIn';\nimport { projectSettingsExpirationStorageKeySchema } from './projectSettingsExpirationScheme';\n\n/**\n * Expiration time of the project settings in milliseconds.\n */\nexport const PROJECT_SETTINGS_EXPIRATION_TIME = 1000 * 60 * 5; // 5 minutes\n\n/**\n * Fetches and updates the project settings from the API.\n *\n * This function retrieves the latest project configuration settings\n * from Dynamic's servers, including authentication options, enabled chains,\n * and security configurations. The settings are cached for performance.\n *\n * @example\n * ```ts\n * const settings = await fetchProjectSettings();\n * console.log('Enabled chains:', settings.chains);\n * ```\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the updated project settings.\n * @see createDynamicClient\n * @see initializeClient\n * @notInstrumented\n * @noHook Internal settings fetch that is not part of the public hook surface.\n */\nexport const fetchProjectSettings = async (client = getDefaultClient()) => {\n  const core = getCore(client);\n\n  const currentExpiration = await core.storage.getItem(\n    projectSettingsExpirationStorageKeySchema\n  );\n\n  const hasProjectSettings = Boolean(client.projectSettings);\n  const isExpired = currentExpiration && currentExpiration < Date.now();\n\n  // We want to cache the project settings if its valid and user is connected.\n  // This avoids unnecessary API calls and speeds up the initial load.\n  if (hasProjectSettings && !isExpired && isSignedIn(client)) {\n    return client.projectSettings;\n  }\n\n  const apiClient = createApiClient({}, client);\n\n  core.logger.debug('[fetchProjectSettings] Fetching project settings...');\n\n  const doFetch = async () =>\n    apiClient.getEnvironmentSettings(\n      {\n        environmentId: core.environmentId,\n        sdkVersion: `${CLIENT_SDK_NAME}/${core.version}`,\n      },\n      {\n        credentials: 'omit',\n      }\n    );\n\n  const projectSettings = await retryOnFail({\n    fn: doFetch,\n    maxRetries: 2,\n  });\n\n  core.state.set({ projectSettings: projectSettings ?? null });\n\n  await core.storage.setItem(\n    projectSettingsExpirationStorageKeySchema,\n    Date.now() + PROJECT_SETTINGS_EXPIRATION_TIME\n  );\n\n  return projectSettings;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport type { SessionKeys } from '../sessionKeys.types';\n\n/** @notInstrumented */\nexport const generateSessionKeys = async (\n  client: DynamicClient\n): Promise<SessionKeys> => {\n  const core = getCore(client);\n\n  const currentState = core.state.get();\n\n  const isRotation = Boolean(currentState.sessionKeys);\n\n  const logContext = {\n    environmentId: core.environmentId,\n    operation: isRotation ? 'rotate' : 'create',\n    userId: currentState.user?.id ?? null,\n  };\n\n  core.logger.info(\n    isRotation\n      ? '[generateSessionKeys] Rotating session key...'\n      : '[generateSessionKeys] Creating session key...',\n    logContext\n  );\n\n  await core.keychain.removeKey('session');\n\n  const publicKey = await core.keychain.generateKey('session');\n\n  assertDefined(publicKey, 'Public key not found');\n\n  core.state.set({\n    sessionKeys: publicKey,\n  });\n\n  core.logger.info(\n    isRotation\n      ? '[generateSessionKeys] Session key rotated'\n      : '[generateSessionKeys] Session key created',\n    logContext\n  );\n\n  return { publicKey };\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { getWalletAccounts } from '../../getWalletAccounts';\nimport type { WalletProvider } from '../../walletProvider';\nimport { getWalletProviderFromWalletAccount } from '../getWalletProviderFromWalletAccount';\n\n/** @notInstrumented */\nexport const getAvailableWalletProvidersFromWalletAccounts = (\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const walletProvidersMap: Map<string, WalletProvider> = new Map();\n\n  const walletAccounts = getWalletAccounts(client);\n\n  walletAccounts.forEach((walletAccount) => {\n    if (walletProvidersMap.has(walletAccount.walletProviderKey)) {\n      return;\n    }\n\n    try {\n      const walletProvider = getWalletProviderFromWalletAccount(\n        {\n          walletAccount,\n        },\n        client\n      );\n\n      walletProvidersMap.set(walletAccount.walletProviderKey, walletProvider);\n    } catch (error) {\n      core.logger.debug('Wallet provider not found for wallet account', {\n        error,\n        walletAccount: walletAccount.address,\n      });\n    }\n  });\n\n  return Array.from(walletProvidersMap.values());\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { LogoutReason } from '../../auth/logoutReason';\nimport { getAvailableWalletProvidersFromWalletAccounts } from '../utils/getAvailableWalletProvidersFromWalletAccounts';\n\n/**\n * Tear down every wallet provider on the client.\n *\n * Each provider's `destroy` is responsible for its own local + remote\n * cleanup. We swallow errors so a failing destroy on one provider does not\n * block teardown of the others (e.g. during logout).\n *\n * @notInstrumented\n */\nexport const destroyWalletProviders = async (\n  { reason }: { reason?: LogoutReason },\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const walletProviders = getAvailableWalletProvidersFromWalletAccounts(client);\n\n  await Promise.all(\n    walletProviders.map(async (walletProvider) => {\n      if (!walletProvider.destroy) return;\n      try {\n        await walletProvider.destroy({ reason });\n      } catch (err) {\n        core.logger.error(\n          `Error destroying wallet provider ${walletProvider.key}`,\n          err\n        );\n      }\n    })\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { getCore } from '../../../client/core/getCore';\nimport { getSecureCookieAttribute } from '../../../utils/getSecureCookieAttribute';\nimport { setCookie } from '../../../utils/setCookie';\nimport { createApiClient } from '../../apiClient';\nimport { emitEvent } from '../../clientEvents';\nimport { fetchProjectSettings } from '../../projectSettings/fetchProjectSettings';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { generateSessionKeys } from '../../sessionKeys/generateSessionKeys';\nimport { destroyWalletProviders } from '../../wallets/destroyWalletProviders';\nimport { DYNAMIC_AUTH_COOKIE_NAME } from '../consts';\nimport type { LogoutReason } from '../logoutReason';\n\n/**\n * Logs the user out with an explicit reason.\n *\n * Revokes the session, clears auth state, terminates wallet providers, and\n * emits the `logout` client event with the given reason. The reason is also\n * captured as an argument on the function-instrumentation event, which is\n * how Datadog distinguishes between different logout causes.\n *\n * Use this instead of the public `logout` when triggering a logout from\n * internal or extension code — the caller owns the reason string, so the\n * telemetry correctly attributes *why* the logout happened.\n *\n * @param params - The logout params.\n * @param params.reason - Why the logout is being triggered. Extension authors\n *   needing a reason outside the SDK catalog can cast with `as LogoutReason`.\n * @param client - The Dynamic client instance.\n * @instrumented\n */\nexport const logoutWithReason = async (\n  { reason }: { reason: LogoutReason },\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  core.logger.debug('[logoutWithReason] Logging out...', { reason });\n\n  await destroyWalletProviders({ reason }, client);\n\n  if (client.user !== null) {\n    const apiClient = createApiClient({}, client);\n\n    try {\n      await apiClient.revokeSession({\n        environmentId: core.environmentId,\n      });\n    } catch (error) {\n      core.logger.error('Failed to revoke session', error);\n    }\n\n    /**\n     * This deletes the auth cookie if it exists.\n     * If the cookie doesn't exist, this sets a new cookie that expires immediately.\n     */\n    if (isCookieEnabled(client)) {\n      // Match the Secure attribute used when the cookie was written so the\n      // deletion cookie is accepted consistently in a secure context.\n      const secureAttribute = getSecureCookieAttribute();\n\n      setCookie(\n        `${DYNAMIC_AUTH_COOKIE_NAME}=; Max-Age=-99999999; path=/; SameSite=Lax${secureAttribute}`\n      );\n    }\n  }\n\n  await core.keychain.removeKey('session');\n\n  core.state.set({\n    captchaToken: null,\n    elevatedAccessTokens: [],\n    legacyToken: null,\n    mfaToken: null,\n    sessionExpiresAt: null,\n    sessionKeys: null,\n    token: null,\n    unverifiedWalletAccounts: [],\n    user: null,\n  });\n\n  emitEvent({ args: { reason }, event: 'logout' }, client);\n\n  // Refetch project settings\n  void fetchProjectSettings(client);\n\n  // Regenerate session keys\n  void generateSessionKeys(client);\n};\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Consumes and clears the current MFA token from the client state.\n *\n * This function retrieves the MFA token obtained from a successful MFA authentication,\n * and removes it from the client, to prevent it from being used again.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns The MFA token that was consumed.\n * @throws Error if no MFA token is found.\n * @instrumented\n */\nexport const consumeMfaToken = (client = getDefaultClient()) => {\n  const core = getCore(client);\n\n  const mfaToken = core.state.get().mfaToken;\n\n  assertDefined(mfaToken, 'No MFA token found');\n\n  core.state.set({\n    mfaToken: null,\n  });\n\n  return mfaToken;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { createApiClient } from '../../apiClient';\n\n/**\n * Retrieves the available MFA methods for the current user.\n *\n * This function fetches information about which multi-factor authentication\n * methods are available and configured for the user's account.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the user's MFA methods configuration.\n  * @notInstrumented\n */\nexport const getMfaMethods = async (client = getDefaultClient()) => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const userMfaMethods = await apiClient.getUserMfaMethods({\n    environmentId: core.environmentId,\n    verifiedOnly: true,\n  });\n\n  return userMfaMethods;\n};\n","import type { MFAAction } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { getMfaMethods } from '../getMfaMethods';\n\ntype IsMfaRequiredForActionParams = {\n  mfaAction: MFAAction;\n};\n\n/**\n * Checks if MFA is required for a specific action.\n *\n * This function determines whether multi-factor authentication is required\n * for the specified action based on project settings and user configuration.\n *\n * @param params.mfaAction - The action to check MFA requirements for.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to true if MFA is required for the action, false otherwise.\n  * @notInstrumented\n */\nexport const isMfaRequiredForAction = async (\n  { mfaAction }: IsMfaRequiredForActionParams,\n  client = getDefaultClient()\n) => {\n  const projectSettings = client.projectSettings;\n\n  const isRequiredForAction = projectSettings?.security?.mfa?.actions?.some(\n    (action) => action.action === mfaAction && action.required\n  );\n\n  // if mfa is not required for the action, return false\n  // no matter if general mfa is set to required or not\n  if (!isRequiredForAction) {\n    return false;\n  }\n\n  const isMfaMethodRequired = projectSettings?.security?.mfa?.required;\n\n  // if mfa is required for the action and also set as required in general, return true\n  if (isMfaMethodRequired) {\n    return true;\n  }\n\n  const mfaMethods = await getMfaMethods(client);\n  // if general mfa is optional, but user has registered methods,\n  // then it should be required for the action\n  return mfaMethods.userHasVerifiedMfaMethods;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,IAAa,8BAAb,cAAiDA,+CAAU;CAEzD,YAAY,YAAoB;AAC9B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mDAAmD;GAClE,CAAC;;;;;;;ACMN,MAAa,cAAc,OAAU,EACnC,QAAQ,GACR,IACA,iBAC0B;AAC1B,MAAK,IAAI,QAAQ,GAAG,SAAS,YAAY,QACvC,KAAI;AACF,SAAO,MAAM,IAAI;UACV,OAAO;AACd,MAAI,SAAS,WACX,OAAM;AAGR,MAAI,QAAQ,EACV,OAAM,IAAI,SAAS,YAAY,WAAW,SAAS,MAAM,CAAC;;;;;;AAShE,OAAM,IAAI,4BAA4B,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACZnD,MAAa,cAAc,SAASC,uDAAkB,KACpD,QAAQ,OAAO,QAAQC,uDAAkB,OAAO,CAAC,SAAS,EAAE;;;;;AC5B9D,MAAa,0BAA6B,WAIf;AACzB,QAAO;;;;;;;;ACHT,MAAa,4CAA4C,uBACvD;CACE,KAAK;CACL,QAAQC,SAAE,QAAQ;CACnB,CACF;;;;;;;ACDD,MAAa,mCAAmC,MAAO,KAAK;;;;;;;;;;;;;;;;;;;;;AAsB5D,MAAa,uBAAuB,OAAO,SAASC,uDAAkB,KAAK;CACzE,MAAM,OAAOC,6CAAQ,OAAO;CAE5B,MAAM,oBAAoB,MAAM,KAAK,QAAQ,QAC3C,0CACD;AAOD,KAL2B,QAAQ,OAAO,gBAAgB,IAKhC,EAJR,qBAAqB,oBAAoB,KAAK,KAAK,KAI7B,WAAW,OAAO,CACxD,QAAO,OAAO;CAGhB,MAAM,YAAYC,qDAAgB,EAAE,EAAE,OAAO;AAE7C,MAAK,OAAO,MAAM,sDAAsD;CAExE,MAAM,UAAU,YACd,UAAU,uBACR;EACE,eAAe,KAAK;EACpB,YAAY,GAAGC,qDAAgB,GAAG,KAAK;EACxC,EACD,EACE,aAAa,QACd,CACF;CAEH,MAAM,kBAAkB,MAAM,YAAY;EACxC,IAAI;EACJ,YAAY;EACb,CAAC;AAEF,MAAK,MAAM,IAAI,EAAE,iBAAiB,mBAAmB,MAAM,CAAC;AAE5D,OAAM,KAAK,QAAQ,QACjB,2CACA,KAAK,KAAK,GAAG,iCACd;AAED,QAAO;;;;;;ACtET,MAAa,sBAAsB,OACjC,WACyB;CACzB,MAAM,OAAOC,6CAAQ,OAAO;CAE5B,MAAM,eAAe,KAAK,MAAM,KAAK;CAErC,MAAM,aAAa,QAAQ,aAAa,YAAY;CAEpD,MAAM,aAAa;EACjB,eAAe,KAAK;EACpB,WAAW,aAAa,WAAW;EACnC,QAAQ,aAAa,MAAM,MAAM;EAClC;AAED,MAAK,OAAO,KACV,aACI,kDACA,iDACJ,WACD;AAED,OAAM,KAAK,SAAS,UAAU,UAAU;CAExC,MAAM,YAAY,MAAM,KAAK,SAAS,YAAY,UAAU;AAE5D,oDAAc,WAAW,uBAAuB;AAEhD,MAAK,MAAM,IAAI,EACb,aAAa,WACd,CAAC;AAEF,MAAK,OAAO,KACV,aACI,8CACA,6CACJ,WACD;AAED,QAAO,EAAE,WAAW;;;;;;ACtCtB,MAAa,iDACX,WACG;CACH,MAAM,OAAOC,6CAAQ,OAAO;CAE5B,MAAMC,qCAAkD,IAAI,KAAK;AAIjE,CAFuBC,uDAAkB,OAAO,CAEjC,SAAS,kBAAkB;AACxC,MAAI,mBAAmB,IAAI,cAAc,kBAAkB,CACzD;AAGF,MAAI;GACF,MAAM,iBAAiBC,wEACrB,EACE,eACD,EACD,OACD;AAED,sBAAmB,IAAI,cAAc,mBAAmB,eAAe;WAChE,OAAO;AACd,QAAK,OAAO,MAAM,gDAAgD;IAChE;IACA,eAAe,cAAc;IAC9B,CAAC;;GAEJ;AAEF,QAAO,MAAM,KAAK,mBAAmB,QAAQ,CAAC;;;;;;;;;;;;;;ACxBhD,MAAa,yBAAyB,OACpC,EAAE,UACF,WACG;CACH,MAAM,OAAOC,6CAAQ,OAAO;CAE5B,MAAM,kBAAkB,8CAA8C,OAAO;AAE7E,OAAM,QAAQ,IACZ,gBAAgB,IAAI,OAAO,mBAAmB;AAC5C,MAAI,CAAC,eAAe,QAAS;AAC7B,MAAI;AACF,SAAM,eAAe,QAAQ,EAAE,QAAQ,CAAC;WACjC,KAAK;AACZ,QAAK,OAAO,MACV,oCAAoC,eAAe,OACnD,IACD;;GAEH,CACH;;;;;;;;;;;;;;;;;;;;;;;ACAH,MAAK,mBAAA,OACH,EAAA,qBAEA;;;AAKA,OAAE,uBAAkB,EAAA,QAAmB,EAAC,OAAO;AAE/C,KAAE,OAAI,SAAA,MAAA;EACJ,MAAE,YAAgB,qDAAc,EAAA,EAAA,OAAA;AAEhC,MAAI;AACF,SAAM,UAAQ,cAAA,EACd,eAAiB,KAAE,eACrB,CAAA;;AAEE,QAAA,OAAA,MAAA,4BAAA,MAAA;;;;;;AAOF,MAAE,qDAAM,OAAkB,CAK1B,gDACF,GAAA,8DAAA,4CAHS,+DAA6C;;AAQtD,OAAE,KAAA,SAAkB,UAAA,UAAA;AAEpB,MAAE,MAAA,IAAa;EACb,cAAc;EACd,sBAAsB,EAAA;EACtB,aAAa;EACb,UAAO;EACP,kBAAA;EACA,aAAU;EACV,OAAA;;EAEF,MAAA;;AAGA,gDAAK;EAAA,MAAA,EAAA,QAAqB;EAAA,OAAO;EAAA,EAAA,OAAA;AAGjC,CAAK,qBAAoB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACrElC,MAAE,mBAAsB,SAAU,uDAAU,KAAA;;;AAK1C,oDAAY,UAAI,qBAAA;kBAGhB,UAAO,MACR,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACbD,MAAa,gBAAgB,OAAO,SAASC,uDAAkB,KAAK;CAClE,MAAM,OAAOC,6CAAQ,OAAO;AAQ5B,QALuB,MAFLC,qDAAgB,EAAE,EAAE,OAAO,CAEN,kBAAkB;EACvD,eAAe,KAAK;EACpB,cAAc;EACf,CAAC;;;;;;;;;;;;;;;;ACDJ,MAAa,yBAAyB,OACpC,EAAE,aACF,SAASC,uDAAkB,KACxB;CACH,MAAM,kBAAkB,OAAO;AAQ/B,KAAI,CANwB,iBAAiB,UAAU,KAAK,SAAS,MAClE,WAAW,OAAO,WAAW,aAAa,OAAO,SACnD,CAKC,QAAO;AAMT,KAH4B,iBAAiB,UAAU,KAAK,SAI1D,QAAO;AAMT,SAHmB,MAAM,cAAc,OAAO,EAG5B"}