@dynamic-labs-sdk/client 1.23.0 → 1.24.0

package/dist/index.native.esm.js

@@ -1,9 +1,9 @@
-import { $ as UnauthorizedError, B as onEvent, Ct as name, E as getWalletProviderRegistry, F as normalizeAddress, H as createApiClient, I as splitWalletProviderKey, K as getNonce, M as getChainFromVerifiedCredentialChain, N as CHAINS_INFO_MAP, O as NoWalletProviderFoundError, P as formatWalletAccountId, Q as createLocalStorageAdapter, R as emitEvent, S as extractSessionId, St as getCore, T as WalletProviderPriority, V as onceEvent, X as updateNoncePoolStorage, Y as fetchAndStoreNonces, Z as createStorageKeySchema, _ as instrumentFunction, _t as NONCE_POOL_SIZE, a as InvalidParamError, at as APIError, b as getUserAgent, ct as DYNAMIC_ICONIC_SPRITE_URL, dt as isCookieEnabled, et as SandboxMaximumThresholdReachedError, ft as assertDefined, gt as getPlatform, h as checkAndRaiseWalletAccountsChangedEvent, ht as randomString, i as parseElevatedAccessToken, it as InvalidExternalAuthError, k as getWalletAccounts, lt as SDK_API_CORE_VERSION, m as isUserMissingMfaAuth, mt as getElevatedAccessToken, n as updateAuthFromVerifyResponse, nt as MfaInvalidOtpError, o as initializeWaasClientsForEagerRecovery, p as getWalletProviders, pt as ValueMustBeDefinedError, r as upsertElevatedAccessToken, rt as LinkCredentialError, tt as MfaRateLimitedError, v as scrubParameters, vt as getDefaultClient, w as getWalletProviderFromWalletAccount, wt as version, x as getOperatingSystem, xt as BaseError, y as DEFAULT_PII_FIELDS, yt as setDefaultClient, z as offEvent } from "./NativeModuleNotLinkedError-DIpQjh_K.native.esm.js";
-import { B as __logoutWithReason_wrapped, C as getKeychainIndexedDBName, E as assertSafeNavigationUrl, F as INITIALIZE_STORAGE_SYNC_TRACKER_KEY, G as subscribeWithSelector, H as fetchProjectSettings, I as REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY, K as isEqualShallow, L as REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY, M as createDeferredPromise, N as FETCH_PROJECT_SETTINGS_TRACKER_KEY, O as createLogger, P as GENERATE_SESSION_KEYS_TRACKER_KEY, R as isServerSideRendering, S as MergeAccountsConfirmationError, T as createKeychainService, U as isSignedIn, V as generateSessionKeys, W as retryOnFail, _ as getAppMetadata, a as verifyMessageSignatureOwnership, b as WalletAlreadyLinkedToAnotherUserError, c as formatSignInMessage, d as setUnverifiedWalletAccounts, f as createVisit, g as isCaptchaRequired, h as consumeCaptchaToken, i as getNetworksData, j as CannotTrackError, k as createCrossTabBroadcast, l as reconcileWalletAccountsAgainstClient, m as __setCaptchaToken_wrapped, o as removeUnverifiedWalletAccount, p as hasExtension, q as createStorage, s as createSignInMessageStatement, t as getNetworkProviderFromNetworkId, u as updateWalletProviderKeysForVerifiedCredentials, v as MethodNotImplementedError, w as createRealtimeService, x as NoNetworkProvidersError, y as WalletScreeningBlockedError, z as getBuffer } from "./getNetworkProviderFromNetworkId-YcalZlDG.native.esm.js";
-import { n as NotWaasWalletAccountError, r as __refreshAuth_wrapped } from "./isDynamicWaasEnabled-BR_pG4jM.native.esm.js";
-import { a as WaasOnboardingIncompleteError, i as preconnectWaasIframe, n as isPendingRecoveryCodesAcknowledgment, o as WaasLoadFailedError, r as isDeviceRegistrationRequired, t as isUserOnboardingComplete } from "./isUserOnboardingComplete-Hzz6fwTk.native.esm.js";
-import { n as getVerifiedCredentialForWalletAccount, t as getWalletProviderByKey } from "./getWalletProviderByKey-BhcBoGMW.native.esm.js";
-import { n as getMfaMethods, r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-GWZny7T2.native.esm.js";
+import { $ as UnauthorizedError, B as onEvent, Ct as name, E as getWalletProviderRegistry, F as normalizeAddress, H as createApiClient, I as splitWalletProviderKey, K as getNonce, M as getChainFromVerifiedCredentialChain, N as CHAINS_INFO_MAP, O as NoWalletProviderFoundError, P as formatWalletAccountId, Q as createLocalStorageAdapter, R as emitEvent, S as extractSessionId, St as getCore, T as WalletProviderPriority, V as onceEvent, X as updateNoncePoolStorage, Y as fetchAndStoreNonces, Z as createStorageKeySchema, _ as instrumentFunction, _t as NONCE_POOL_SIZE, a as InvalidParamError, at as APIError, b as getUserAgent, ct as DYNAMIC_ICONIC_SPRITE_URL, dt as isCookieEnabled, et as SandboxMaximumThresholdReachedError, ft as assertDefined, gt as getPlatform, h as checkAndRaiseWalletAccountsChangedEvent, ht as randomString, i as parseElevatedAccessToken, it as InvalidExternalAuthError, k as getWalletAccounts, lt as SDK_API_CORE_VERSION, m as isUserMissingMfaAuth, mt as getElevatedAccessToken, n as updateAuthFromVerifyResponse, nt as MfaInvalidOtpError, o as initializeWaasClientsForEagerRecovery, p as getWalletProviders, pt as ValueMustBeDefinedError, r as upsertElevatedAccessToken, rt as LinkCredentialError, tt as MfaRateLimitedError, v as scrubParameters, vt as getDefaultClient, w as getWalletProviderFromWalletAccount, wt as version, x as getOperatingSystem, xt as BaseError, y as DEFAULT_PII_FIELDS, yt as setDefaultClient, z as offEvent } from "./NativeModuleNotLinkedError-CJy_4-6r.native.esm.js";
+import { A as createCrossTabBroadcast, B as getBuffer, C as getKeychainIndexedDBName, D as assertSafeNavigationUrl, E as createKeychainService, F as GENERATE_SESSION_KEYS_TRACKER_KEY, H as isEqualShallow, I as INITIALIZE_STORAGE_SYNC_TRACKER_KEY, L as REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY, M as CannotTrackError, N as createDeferredPromise, P as FETCH_PROJECT_SETTINGS_TRACKER_KEY, R as REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY, S as MergeAccountsConfirmationError, T as assertSafeDeeplinkUrl, U as createStorage, V as subscribeWithSelector, _ as getAppMetadata, a as verifyMessageSignatureOwnership, b as WalletAlreadyLinkedToAnotherUserError, c as formatSignInMessage, d as setUnverifiedWalletAccounts, f as createVisit, g as isCaptchaRequired, h as consumeCaptchaToken, i as getNetworksData, k as createLogger, l as reconcileWalletAccountsAgainstClient, m as __setCaptchaToken_wrapped, o as removeUnverifiedWalletAccount, p as hasExtension, s as createSignInMessageStatement, t as getNetworkProviderFromNetworkId, u as updateWalletProviderKeysForVerifiedCredentials, v as MethodNotImplementedError, w as createRealtimeService, x as NoNetworkProvidersError, y as WalletScreeningBlockedError, z as isServerSideRendering } from "./getNetworkProviderFromNetworkId-R8IKGc6s.native.esm.js";
+import { a as fetchProjectSettings, i as generateSessionKeys, n as getVerifiedCredentialForWalletAccount, o as isSignedIn, r as __logoutWithReason_wrapped, s as retryOnFail, t as getWalletProviderByKey } from "./getWalletProviderByKey-CqdhcE7y.native.esm.js";
+import { n as NotWaasWalletAccountError, r as __refreshAuth_wrapped } from "./isDynamicWaasEnabled-yo_LqzH5.native.esm.js";
+import { a as WaasOnboardingIncompleteError, i as preconnectWaasIframe, n as isPendingRecoveryCodesAcknowledgment, o as WaasLoadFailedError, r as isDeviceRegistrationRequired, t as isUserOnboardingComplete } from "./isUserOnboardingComplete-DcRl6Q1f.native.esm.js";
+import { n as getMfaMethods, r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-Zi7_K00W.native.esm.js";
 import { assertPackageVersion } from "@dynamic-labs-sdk/assert-package-version";
 import { AuthModeEnum, CaptchaProviderEnum as CaptchaProviderEnum$1, ExchangeKeyEnum, JwtVerifiedCredentialFormatEnum, JwtVerifiedCredentialFormatEnum as JwtVerifiedCredentialFormatEnum$1, MFAAction, MfaBackupCodeAcknowledgement, ProviderEnum, ProviderEnum as ProviderEnum$1, TokenScope, TokenScope as TokenScope$1, WaasBackupOptionsEnum, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
 import * as z from "zod/mini";
@@ -776,62 +776,6 @@ const createNavigationHandler = () => {
 	};
 };
 
-//#endregion
-//#region src/errors/UnsafeDeeplinkUrlError.ts
-/**
-* Thrown when a deeplink is opened with a URL whose scheme can execute script
-* in the current origin (`javascript:`, `data:`, `vbscript:`). Unlike
-* navigation, deeplinks legitimately use custom app schemes (e.g. `phantom:`,
-* `metamask:`), so this guards via a denylist of dangerous schemes rather than
-* an `http(s)` allowlist, preventing DOM XSS through the `window.location.assign`
-* sink while leaving valid wallet deeplinks untouched.
-*/
-var UnsafeDeeplinkUrlError = class extends BaseError {
-	constructor({ scheme }) {
-		super({
-			cause: null,
-			code: "unsafe_deeplink_url_error",
-			docsUrl: null,
-			name: "UnsafeDeeplinkUrlError",
-			shortMessage: `Refusing to open a deeplink with an unsafe scheme "${scheme}". Script-executing schemes (javascript:, data:, vbscript:) are not allowed. This may indicate a compromised or misconfigured deeplink URL.`
-		});
-	}
-};
-
-//#endregion
-//#region src/utils/assertSafeDeeplinkUrl/assertSafeDeeplinkUrl.ts
-/**
-* Schemes that can execute script in the current origin and must never reach a
-* deeplink navigation sink. Deeplinks legitimately use arbitrary custom app
-* schemes (e.g. `phantom:`, `metamask:`), so a denylist of dangerous schemes is
-* used here instead of the `http(s)` allowlist applied to standard navigation.
-*/
-const DANGEROUS_DEEPLINK_SCHEMES = new Set([
-	"javascript:",
-	"data:",
-	"vbscript:",
-	"blob:"
-]);
-/**
-* Asserts that the given deeplink URL is safe to open, i.e. its scheme is not
-* one that can execute script (`javascript:`, `data:`, `vbscript:`, `blob:`). Used as a
-* defense-in-depth guard on the `window.location.assign` deeplink sink to
-* prevent DOM XSS, while still permitting custom wallet app schemes.
-*
-* @param url - The deeplink URL string to validate.
-* @throws {UnsafeDeeplinkUrlError} If the URL cannot be parsed or its scheme can execute script.
-* @notInstrumented
-*/
-const assertSafeDeeplinkUrl = (url) => {
-	let parsed;
-	try {
-		parsed = new URL(url);
-	} catch {
-		throw new UnsafeDeeplinkUrlError({ scheme: "unknown" });
-	}
-	if (DANGEROUS_DEEPLINK_SCHEMES.has(parsed.protocol)) throw new UnsafeDeeplinkUrlError({ scheme: parsed.protocol });
-};
-
 //#endregion
 //#region src/services/openDeeplink/createWebDeeplinkOpener/createWebDeeplinkOpener.ts
 /**
@@ -3933,8 +3877,8 @@ const prepareFlowSigning = async ({ assertBalanceForGasCost, assertBalanceForTra
 			environmentId,
 			flowId,
 			flowPrepareSigningRequest: {
-				assertBalanceForGasCost: assertBalanceForGasCost ?? false,
-				assertBalanceForTransferAmount: assertBalanceForTransferAmount ?? false
+				assertBalanceForGasCost: assertBalanceForGasCost ?? true,
+				assertBalanceForTransferAmount: assertBalanceForTransferAmount ?? true
 			},
 			xDynamicFlowSessionToken: sessionToken
 		}),
@@ -8191,7 +8135,13 @@ const isSameAddress = ({ chain, left, right }) => normalizeAddress({
 //#region src/modules/wallets/verifyWalletAccountForSignInOrTransfer/verifyWalletAccountForSignInOrTransfer.ts
 /** @notInstrumented */
 const verifyWalletAccountForSignInOrTransfer = async ({ walletAccount, isTransfer, requestedScopes }, client) => {
-	if (walletAccount.verifiedCredentialId) throw new WalletAccountAlreadyVerifiedError(walletAccount.address);
+	/**
+	* A wallet that is already verified can still be used for step-up
+	* authentication: the user proves ownership again to mint an elevated
+	* access token for the requested scope. Skip the already-verified guard
+	* when scopes are provided so the call reaches walletsVerify.
+	*/
+	if (walletAccount.verifiedCredentialId && !requestedScopes) throw new WalletAccountAlreadyVerifiedError(walletAccount.address);
 	const walletProvider = getWalletProviderFromWalletAccount({ walletAccount }, client);
 	const { messageToSign, signature } = await __proveWalletAccountOwnership_wrapped({ walletAccount }, client);
 	const formattedSignature = walletAccount.hardwareWalletVendor ? formatSignatureForHardwareWallet({
@@ -8260,7 +8210,7 @@ const verifyWalletAccountForSignInOrTransfer = async ({ walletAccount, isTransfe
 * @param [params.requestedScopes] - Optional token scopes to request during verification.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the verified wallet account.
-* @throws WalletAccountAlreadyVerifiedError If the wallet is already verified.
+* @throws WalletAccountAlreadyVerifiedError If the wallet is already verified and no requestedScopes are provided.
 * @throws WalletAlreadyLinkedToAnotherUserError If the wallet is linked to another user.
 * @see connectWithWalletProvider
 * @see connectAndVerifyWithWalletProvider