@dynamic-labs-sdk/client 1.22.0 → 1.23.0

package/dist/{NativeModuleNotLinkedError-BK7v1pWC.native.esm.js → NativeModuleNotLinkedError-DIpQjh_K.native.esm.js}

@@ -6,18 +6,7 @@ import { Platform } from "react-native";
 
 //#region package.json
 var name = "@dynamic-labs-sdk/client";
-var version = "1.22.0";
-var dependencies = {
-	"@dynamic-labs-sdk/assert-package-version": "workspace:*",
-	"@dynamic-labs-wallet/browser-wallet-client": "1.0.79",
-	"@dynamic-labs-wallet/forward-mpc-client": "1.0.1",
-	"@dynamic-labs/sdk-api-core": "catalog:",
-	"@simplewebauthn/browser": "13.1.0",
-	"ably": "2.17.1",
-	"buffer": "6.0.3",
-	"eventemitter3": "5.0.1",
-	"zod": "4.0.5"
-};
+var version = "1.23.0";
 
 //#endregion
 //#region src/client/core/getCore/getCore.ts
@@ -141,26 +130,6 @@ const setDefaultClient = (client) => {
 const NONCE_POOL_EXPIRATION_TIME = 6e4 * 60 * 24;
 const NONCE_POOL_SIZE = 5;
 
-//#endregion
-//#region src/modules/apiClient/constants.ts
-const DYNAMIC_API_VERSION_HEADER = "x-dyn-api-version";
-const DYNAMIC_REQUEST_ID_HEADER = "x-dyn-request-id";
-const DYNAMIC_SDK_VERSION_HEADER = "x-dyn-version";
-const ELEVATED_ACCESS_TOKEN_HEADER = "x-dyn-elevated-access-token";
-const MFA_TOKEN_HEADER = "x-mfa-auth-token";
-const SESSION_PUBLIC_KEY_HEADER = "x-dyn-session-public-key";
-const DYNAMIC_SDK_API_VERSION = dependencies["@dynamic-labs/sdk-api-core"];
-const DYNAMIC_SDK_SESSION_ID_HEADER = "x-dyn-session-id";
-/**
-* Reports the runtime platform (`web` or `react-native`) to the Dynamic API.
-*
-* Named `x-dynamic-platform` (not `x-dyn-*`) to match the header the legacy
-* webview-controller already sends, so the backend receives a consistent
-* platform signal across SDK generations.
-*/
-const DYNAMIC_PLATFORM_HEADER = "x-dynamic-platform";
-const CLIENT_SDK_NAME = "ClientSDK";
-
 //#endregion
 //#region src/utils/getPlatform/getPlatform.native.ts
 /**
@@ -287,6 +256,41 @@ const getSessionKeys = (client) => {
 	return { publicKey };
 };
 
+//#endregion
+//#region src/generated/dependencyCatalog.ts
+const dependencyCatalog = { "@dynamic-labs/sdk-api-core": "0.0.1083" };
+
+//#endregion
+//#region src/constants.ts
+const SDK_API_CORE_VERSION = dependencyCatalog["@dynamic-labs/sdk-api-core"];
+const DYNAMIC_ICONIC_SPRITE_URL = "https://iconic.dynamic-static-assets.com/icons/sprite.svg";
+
+//#endregion
+//#region src/modules/apiClient/constants.ts
+const DYNAMIC_API_VERSION_HEADER = "x-dyn-api-version";
+const DYNAMIC_REQUEST_ID_HEADER = "x-dyn-request-id";
+const DYNAMIC_SDK_VERSION_HEADER = "x-dyn-version";
+/**
+* Reports *why* the SDK is logging the user out on the `revokeSession`
+* (`/sdk/{env}/revoke`) request. The backend logs it so SDK-initiated session
+* revocations are attributable in Datadog (e.g. `token-expired`,
+* `keychain-key-missing`) instead of being inferred from downstream 401s.
+*/
+const DYNAMIC_LOGOUT_REASON_HEADER = "x-dyn-logout-reason";
+const ELEVATED_ACCESS_TOKEN_HEADER = "x-dyn-elevated-access-token";
+const MFA_TOKEN_HEADER = "x-mfa-auth-token";
+const SESSION_PUBLIC_KEY_HEADER = "x-dyn-session-public-key";
+const DYNAMIC_SDK_SESSION_ID_HEADER = "x-dyn-session-id";
+/**
+* Reports the runtime platform (`web` or `react-native`) to the Dynamic API.
+*
+* Named `x-dynamic-platform` (not `x-dyn-*`) to match the header the legacy
+* webview-controller already sends, so the backend receives a consistent
+* platform signal across SDK generations.
+*/
+const DYNAMIC_PLATFORM_HEADER = "x-dynamic-platform";
+const CLIENT_SDK_NAME = "ClientSDK";
+
 //#endregion
 //#region src/errors/APIError/APIError.ts
 var APIError = class APIError extends BaseError {
@@ -458,6 +462,81 @@ const createConvertToApiErrorMiddleware = ({ errorMappers = [] }) => ({ post: as
 	return context.response;
 } });
 
+//#endregion
+//#region src/errors/UnauthorizedError.ts
+var UnauthorizedError = class extends BaseError {
+	constructor({ cause }) {
+		super({
+			cause,
+			code: "unauthorized_error",
+			docsUrl: null,
+			name: "UnauthorizedError",
+			shortMessage: "Unauthorized"
+		});
+	}
+};
+
+//#endregion
+//#region src/modules/apiClient/utils/unauthorizedMiddleware/createUnauthorizedMiddleware.ts
+/** @notInstrumented */
+const createUnauthorizedMiddleware = () => ({ post: async (context) => {
+	if (context.response.status === 401) {
+		let cause = null;
+		try {
+			const errorBody = await context.response.clone().json();
+			if (errorBody && "error" in errorBody && typeof errorBody.error === "string") cause = new Error(errorBody.error);
+		} catch {}
+		throw new UnauthorizedError({ cause });
+	}
+	return context.response;
+} });
+
+//#endregion
+//#region src/modules/apiClient/createBaseApiClient.ts
+/**
+* Creates the base SDK API client from the client's core state, applying the
+* standard headers and the always-on error-conversion and unauthorized
+* middleware. Any middleware passed via `middleware` runs before those two.
+* @notInstrumented
+*/
+const createBaseApiClient = ({ middleware = [], options = {} }, client) => {
+	const core = getCore(client);
+	const coreState = core.state.get();
+	const settings = {
+		basePath: core.apiBaseUrl,
+		headers: {
+			"Content-Type": "application/json",
+			[DYNAMIC_API_VERSION_HEADER]: `API/${SDK_API_CORE_VERSION}`,
+			[DYNAMIC_PLATFORM_HEADER]: getPlatform(),
+			[DYNAMIC_REQUEST_ID_HEADER]: randomString({ length: 50 }),
+			[DYNAMIC_SDK_SESSION_ID_HEADER]: core.sdkSessionId,
+			[DYNAMIC_SDK_VERSION_HEADER]: `${CLIENT_SDK_NAME}/${version}`,
+			...core.getApiHeaders(),
+			...options.headers
+		}
+	};
+	if (core.metadata?.universalLink) settings.headers["Origin"] = core.metadata.universalLink;
+	if (client.token) settings.headers.Authorization = `Bearer ${client.token}`;
+	if (client.projectSettings && isCookieEnabled(client)) settings.credentials = "include";
+	if (options.includeMfaToken && coreState.mfaToken) settings.headers[MFA_TOKEN_HEADER] = coreState.mfaToken;
+	if (options.elevatedAccessTokenScope) {
+		const elevatedToken = getElevatedAccessToken({ scope: options.elevatedAccessTokenScope }, client);
+		if (elevatedToken) settings.headers[ELEVATED_ACCESS_TOKEN_HEADER] = elevatedToken;
+	}
+	const sessionPublicKey = getSessionKeys(client)?.publicKey;
+	const isSessionPublicKeyHeaderPresent = settings.headers[SESSION_PUBLIC_KEY_HEADER] !== void 0;
+	if (sessionPublicKey && !isSessionPublicKeyHeaderPresent) settings.headers[SESSION_PUBLIC_KEY_HEADER] = sessionPublicKey;
+	return new SDKApi(new Configuration({
+		...settings,
+		fetchApi: core.fetch,
+		middleware: [
+			...middleware,
+			createConvertToApiErrorMiddleware({ errorMappers: [...options.errorMappers || [], clientErrorMapper] }),
+			createUnauthorizedMiddleware()
+		]
+	}));
+};
+
 //#endregion
 //#region src/services/storage/createLocalStorageAdapter/createLocalStorageAdapter.native.ts
 const NAMESPACE = "dynamic";
@@ -539,6 +618,85 @@ const updateNoncePoolStorage = async ({ update }, client) => {
 	return storedBeforeUpdate;
 };
 
+//#endregion
+//#region src/utils/getNonce/fetchAndStoreNonces/fetchAndStoreNonces.ts
+/**
+* Fetches a batch of nonces from the API and appends them to the pool in
+* storage.
+*
+* Prefetching is critical for iOS deep link wallet providers (e.g. Phantom
+* redirect). On iOS, a network request (like fetching a nonce) between a user
+* action and a deeplink call will break the gesture chain, causing iOS to
+* silently ignore the deeplink. By prefetching nonces ahead of time,
+* `getNonce` can return from the stored pool without an interrupting network
+* round-trip.
+*
+* New nonces are **appended** to the stored pool so that unconsumed entries
+* are not discarded by a background refetch; an expired stored pool is
+* replaced instead, since its nonces have already been evicted server-side.
+*
+* Concurrent refills are coalesced behind a single in-flight promise so that
+* simultaneous callers share one `GET /nonces` round-trip instead of each
+* issuing their own (which would inflate the pool and hammer the backend).
+* @notInstrumented
+*/
+const fetchAndStoreNonces = async (client) => {
+	const core = getCore(client);
+	const inFlight = core.state.get().nonceFetchInFlight;
+	if (inFlight) return inFlight;
+	const { environmentId } = core;
+	const apiClient = createBaseApiClient({}, client);
+	const fetchPromise = (async () => {
+		const { nonces } = await apiClient.getNonces({
+			count: NONCE_POOL_SIZE,
+			environmentId
+		});
+		const expiration = Date.now() + NONCE_POOL_EXPIRATION_TIME;
+		await updateNoncePoolStorage({ update: (stored) => {
+			return {
+				expiration,
+				nonces: [...stored && stored.expiration > Date.now() ? stored.nonces : [], ...nonces]
+			};
+		} }, client);
+	})().finally(() => {
+		core.state.set({ nonceFetchInFlight: null });
+	});
+	core.state.set({ nonceFetchInFlight: fetchPromise });
+	return fetchPromise;
+};
+
+//#endregion
+//#region src/utils/getSecureCookieAttribute/getSecureCookieAttribute.ts
+/**
+* Returns the cookie `Secure` attribute suffix (`'; Secure'`) when the current
+* document is running in a secure context, or an empty string otherwise.
+*
+* The `Secure` attribute prevents the browser from ever transmitting the cookie
+* over an unencrypted `http://` connection, which mitigates cleartext token
+* capture (CWE-614). It is intentionally omitted on insecure/localhost dev,
+* because browsers reject `Secure` cookies set over `http://` and that would
+* silently break local testing.
+*
+* Used when building the Dynamic auth JWT cookie string so the attribute is
+* applied consistently on both the write (sign-in/refresh) and clear (logout)
+* paths.
+*
+* @notInstrumented
+*/
+const getSecureCookieAttribute = () => {
+	return Boolean(globalThis.window?.isSecureContext) || globalThis.location?.protocol === "https:" ? "; Secure" : "";
+};
+
+//#endregion
+//#region src/utils/setCookie/setCookie.ts
+/**
+* Sefelly sets the cookie in the browser.
+* @notInstrumented
+*/
+const setCookie = (cookie) => {
+	document.cookie = cookie;
+};
+
 //#endregion
 //#region src/utils/getNonce/getNonce.ts
 /**
@@ -641,35 +799,6 @@ const createDeviceSignatureHeadersMiddleware = (client) => {
 	} };
 };
 
-//#endregion
-//#region src/errors/UnauthorizedError.ts
-var UnauthorizedError = class extends BaseError {
-	constructor({ cause }) {
-		super({
-			cause,
-			code: "unauthorized_error",
-			docsUrl: null,
-			name: "UnauthorizedError",
-			shortMessage: "Unauthorized"
-		});
-	}
-};
-
-//#endregion
-//#region src/modules/apiClient/utils/unauthorizedMiddleware/createUnauthorizedMiddleware.ts
-/** @notInstrumented */
-const createUnauthorizedMiddleware = () => ({ post: async (context) => {
-	if (context.response.status === 401) {
-		let cause = null;
-		try {
-			const errorBody = await context.response.clone().json();
-			if (errorBody && "error" in errorBody && typeof errorBody.error === "string") cause = new Error(errorBody.error);
-		} catch {}
-		throw new UnauthorizedError({ cause });
-	}
-	return context.response;
-} });
-
 //#endregion
 //#region src/modules/apiClient/createApiClient.ts
 /**
@@ -679,120 +808,10 @@ const createUnauthorizedMiddleware = () => ({ post: async (context) => {
 * @notInstrumented
 */
 const createApiClient = (options = {}, client) => {
-	const core = getCore(client);
-	const coreState = core.state.get();
-	const settings = {
-		basePath: core.apiBaseUrl,
-		headers: {
-			"Content-Type": "application/json",
-			[DYNAMIC_API_VERSION_HEADER]: `API/${DYNAMIC_SDK_API_VERSION}`,
-			[DYNAMIC_PLATFORM_HEADER]: getPlatform(),
-			[DYNAMIC_REQUEST_ID_HEADER]: randomString({ length: 50 }),
-			[DYNAMIC_SDK_SESSION_ID_HEADER]: core.sdkSessionId,
-			[DYNAMIC_SDK_VERSION_HEADER]: `${CLIENT_SDK_NAME}/${version}`,
-			...core.getApiHeaders(),
-			...options.headers
-		}
-	};
-	if (core.metadata?.universalLink) settings.headers["Origin"] = core.metadata.universalLink;
-	if (client.token) settings.headers.Authorization = `Bearer ${client.token}`;
-	if (client.projectSettings && isCookieEnabled(client)) settings.credentials = "include";
-	if (options.includeMfaToken && coreState.mfaToken) settings.headers[MFA_TOKEN_HEADER] = coreState.mfaToken;
-	if (options.elevatedAccessTokenScope) {
-		const elevatedToken = getElevatedAccessToken({ scope: options.elevatedAccessTokenScope }, client);
-		if (elevatedToken) settings.headers[ELEVATED_ACCESS_TOKEN_HEADER] = elevatedToken;
-	}
-	const sessionPublicKey = getSessionKeys(client)?.publicKey;
-	const isSessionPublicKeyHeaderPresent = settings.headers[SESSION_PUBLIC_KEY_HEADER] !== void 0;
-	if (sessionPublicKey && !isSessionPublicKeyHeaderPresent) settings.headers[SESSION_PUBLIC_KEY_HEADER] = sessionPublicKey;
-	return new SDKApi(new Configuration({
-		...settings,
-		fetchApi: core.fetch,
-		middleware: [
-			createDeviceSignatureHeadersMiddleware(client),
-			createConvertToApiErrorMiddleware({ errorMappers: [...options.errorMappers || [], clientErrorMapper] }),
-			createUnauthorizedMiddleware()
-		]
-	}));
-};
-
-//#endregion
-//#region src/utils/getNonce/fetchAndStoreNonces/fetchAndStoreNonces.ts
-/**
-* Fetches a batch of nonces from the API and appends them to the pool in
-* storage.
-*
-* Prefetching is critical for iOS deep link wallet providers (e.g. Phantom
-* redirect). On iOS, a network request (like fetching a nonce) between a user
-* action and a deeplink call will break the gesture chain, causing iOS to
-* silently ignore the deeplink. By prefetching nonces ahead of time,
-* `getNonce` can return from the stored pool without an interrupting network
-* round-trip.
-*
-* New nonces are **appended** to the stored pool so that unconsumed entries
-* are not discarded by a background refetch; an expired stored pool is
-* replaced instead, since its nonces have already been evicted server-side.
-*
-* Concurrent refills are coalesced behind a single in-flight promise so that
-* simultaneous callers share one `GET /nonces` round-trip instead of each
-* issuing their own (which would inflate the pool and hammer the backend).
-* @notInstrumented
-*/
-const fetchAndStoreNonces = async (client) => {
-	const core = getCore(client);
-	const inFlight = core.state.get().nonceFetchInFlight;
-	if (inFlight) return inFlight;
-	const { environmentId } = core;
-	const apiClient = createApiClient({}, client);
-	const fetchPromise = (async () => {
-		const { nonces } = await apiClient.getNonces({
-			count: NONCE_POOL_SIZE,
-			environmentId
-		});
-		const expiration = Date.now() + NONCE_POOL_EXPIRATION_TIME;
-		await updateNoncePoolStorage({ update: (stored) => {
-			return {
-				expiration,
-				nonces: [...stored && stored.expiration > Date.now() ? stored.nonces : [], ...nonces]
-			};
-		} }, client);
-	})().finally(() => {
-		core.state.set({ nonceFetchInFlight: null });
-	});
-	core.state.set({ nonceFetchInFlight: fetchPromise });
-	return fetchPromise;
-};
-
-//#endregion
-//#region src/utils/getSecureCookieAttribute/getSecureCookieAttribute.ts
-/**
-* Returns the cookie `Secure` attribute suffix (`'; Secure'`) when the current
-* document is running in a secure context, or an empty string otherwise.
-*
-* The `Secure` attribute prevents the browser from ever transmitting the cookie
-* over an unencrypted `http://` connection, which mitigates cleartext token
-* capture (CWE-614). It is intentionally omitted on insecure/localhost dev,
-* because browsers reject `Secure` cookies set over `http://` and that would
-* silently break local testing.
-*
-* Used when building the Dynamic auth JWT cookie string so the attribute is
-* applied consistently on both the write (sign-in/refresh) and clear (logout)
-* paths.
-*
-* @notInstrumented
-*/
-const getSecureCookieAttribute = () => {
-	return Boolean(globalThis.window?.isSecureContext) || globalThis.location?.protocol === "https:" ? "; Secure" : "";
-};
-
-//#endregion
-//#region src/utils/setCookie/setCookie.ts
-/**
-* Sefelly sets the cookie in the browser.
-* @notInstrumented
-*/
-const setCookie = (cookie) => {
-	document.cookie = cookie;
+	return createBaseApiClient({
+		middleware: [createDeviceSignatureHeadersMiddleware(client)],
+		options
+	}, client);
 };
 
 //#endregion
@@ -1782,11 +1801,6 @@ const instrumentFunction = ({ fn, functionName, getCore: getCore$1, selectors })
 	return wrapped;
 };
 
-//#endregion
-//#region src/constants.ts
-const SDK_API_CORE_VERSION = dependencies["@dynamic-labs/sdk-api-core"];
-const DYNAMIC_ICONIC_SPRITE_URL = "https://iconic.dynamic-static-assets.com/icons/sprite.svg";
-
 //#endregion
 //#region src/modules/wallets/emitWalletAccountsChangedEvent/emitWalletAccountsChangedEvent.ts
 /**
@@ -2101,5 +2115,5 @@ var NativeModuleNotLinkedError = class extends BaseError {
 };
 
 //#endregion
-export { updateNoncePoolStorage as $, NoWalletProviderFoundError as A, emitEvent as B, getOperatingSystem as C, name as Ct, WalletProviderPriority as D, getWalletProviderFromWalletAccount as E, CHAINS_INFO_MAP as F, getSecureCookieAttribute as G, onEvent as H, formatWalletAccountId as I, UnauthorizedError as J, fetchAndStoreNonces as K, normalizeAddress as L, formatWalletProviderKey as M, normalizeWalletNameWithChain as N, getWalletProviderRegistry as O, getChainFromVerifiedCredentialChain as P, getNonce as Q, splitWalletProviderKey as R, getUserAgent as S, getCore as St, DYNAMIC_AUTH_COOKIE_NAME as T, onceEvent as U, offEvent as V, setCookie as W, getHeadersForNonceSignedByDeviceSigners as X, createDeviceSignatureHeadersMiddleware as Y, getDeviceSigner as Z, DYNAMIC_ICONIC_SPRITE_URL as _, NONCE_POOL_SIZE as _t, InvalidParamError as a, LinkCredentialError as at, scrubParameters as b, ClientNotFoundError as bt, findWaasWalletProviderByChain as c, getSessionKeys as ct, DEFAULT_WAAS_BASE_MPC_RELAY_API_URL as d, ValueMustBeDefinedError as dt, createStorageKeySchema as et, DYNAMIC_WAAS_METADATA as f, getElevatedAccessToken as ft, emitWalletAccountsChangedEvent as g, DYNAMIC_SDK_API_VERSION as gt, checkAndRaiseWalletAccountsChangedEvent as h, CLIENT_SDK_NAME as ht, parseElevatedAccessToken as i, MfaInvalidOtpError as it, getWalletAccounts as j, createRuntimeServiceAccessKey as k, isWaasWalletProvider as l, isCookieEnabled as lt, isUserMissingMfaAuth as m, getPlatform as mt, updateAuthFromVerifyResponse as n, SandboxMaximumThresholdReachedError as nt, initializeWaasClientsForEagerRecovery as o, InvalidExternalAuthError as ot, getWalletProviders as p, randomString as pt, createApiClient as q, upsertElevatedAccessToken as r, MfaRateLimitedError as rt, isWaasWalletAccount as s, APIError as st, NativeModuleNotLinkedError as t, createLocalStorageAdapter as tt, DEFAULT_WAAS_BASE_API_URL as u, assertDefined as ut, SDK_API_CORE_VERSION as v, getDefaultClient as vt, extractSessionId as w, version as wt, DEFAULT_PII_FIELDS as x, BaseError as xt, instrumentFunction as y, setDefaultClient as yt, InvalidWalletProviderKeyError as z };
-//# sourceMappingURL=NativeModuleNotLinkedError-BK7v1pWC.native.esm.js.map
+export { UnauthorizedError as $, formatWalletProviderKey as A, onEvent as B, DYNAMIC_AUTH_COOKIE_NAME as C, name as Ct, createRuntimeServiceAccessKey as D, getWalletProviderRegistry as E, normalizeAddress as F, getDeviceSigner as G, createApiClient as H, splitWalletProviderKey as I, getSecureCookieAttribute as J, getNonce as K, InvalidWalletProviderKeyError as L, getChainFromVerifiedCredentialChain as M, CHAINS_INFO_MAP as N, NoWalletProviderFoundError as O, formatWalletAccountId as P, createLocalStorageAdapter as Q, emitEvent as R, extractSessionId as S, getCore as St, WalletProviderPriority as T, createDeviceSignatureHeadersMiddleware as U, onceEvent as V, getHeadersForNonceSignedByDeviceSigners as W, updateNoncePoolStorage as X, fetchAndStoreNonces as Y, createStorageKeySchema as Z, instrumentFunction as _, NONCE_POOL_SIZE as _t, InvalidParamError as a, APIError as at, getUserAgent as b, ClientNotFoundError as bt, findWaasWalletProviderByChain as c, DYNAMIC_ICONIC_SPRITE_URL as ct, DEFAULT_WAAS_BASE_MPC_RELAY_API_URL as d, isCookieEnabled as dt, SandboxMaximumThresholdReachedError as et, DYNAMIC_WAAS_METADATA as f, assertDefined as ft, emitWalletAccountsChangedEvent as g, getPlatform as gt, checkAndRaiseWalletAccountsChangedEvent as h, randomString as ht, parseElevatedAccessToken as i, InvalidExternalAuthError as it, normalizeWalletNameWithChain as j, getWalletAccounts as k, isWaasWalletProvider as l, SDK_API_CORE_VERSION as lt, isUserMissingMfaAuth as m, getElevatedAccessToken as mt, updateAuthFromVerifyResponse as n, MfaInvalidOtpError as nt, initializeWaasClientsForEagerRecovery as o, CLIENT_SDK_NAME as ot, getWalletProviders as p, ValueMustBeDefinedError as pt, setCookie as q, upsertElevatedAccessToken as r, LinkCredentialError as rt, isWaasWalletAccount as s, DYNAMIC_LOGOUT_REASON_HEADER as st, NativeModuleNotLinkedError as t, MfaRateLimitedError as tt, DEFAULT_WAAS_BASE_API_URL as u, getSessionKeys as ut, scrubParameters as v, getDefaultClient as vt, getWalletProviderFromWalletAccount as w, version as wt, getOperatingSystem as x, BaseError as xt, DEFAULT_PII_FIELDS as y, setDefaultClient as yt, offEvent as z };
+//# sourceMappingURL=NativeModuleNotLinkedError-DIpQjh_K.native.esm.js.map