@dynamic-labs-sdk/client 1.23.1 → 1.24.0

package/dist/getNetworkProviderFromNetworkId-OfuaqHXU.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"getNetworkProviderFromNetworkId-OfuaqHXU.esm.js","names":["item: StorageFormat<typeof value>","BufferPolyfill","resolve: (value: T) => void","reject: (reason?: unknown) => void","EventEmitter","LOG_LEVELS: Record<LogLevel, number>","eventEmitter: LoggerEventEmitter","minLevel: LogLevel","parsed: URL","request: IDBOpenDBRequest","createKeychainService: CreateKeychainService","entry: StoredKey","ABLY_STATE_TO_REALTIME_STATE: Record<string, RealtimeConnectionState>","EventEmitter","ablyClient: BaseRealtime | undefined","connectionState: RealtimeConnectionState","connect: RealtimeService['connect']","disconnect: RealtimeService['disconnect']","subscribe: RealtimeService['subscribe']","handler: messageCallback<InboundMessage>","unsubscribe: RealtimeService['unsubscribe']","publish: RealtimeService['publish']","connectRequest: ConnectRequest","filteredUnverifiedWalletAccounts: UnverifiedWalletAccount[]","newWalletAccounts: WalletAccount[]","unverifiedWalletAccountsToUpdate: WalletAccount[]","verifiedCredentialIdToWalletProviderKeyMap: Record<string, string>","reconciledWalletAccounts: WalletAccount[]","suffixFields: string[]","networkDataSchema: z.ZodMiniType<NetworkDataRuntime>","transformedNetworksData: NetworkData[]","networkProvider"],"sources":["../src/errors/UnavailableInServerSideError.ts","../src/utils/isServerSideRendering/isServerSideRendering.ts","../src/services/storage/createLocalStorageAdapter/createLocalStorageAdapter.ts","../src/errors/InvalidStorageSet.ts","../src/services/storage/createStorage/formatForStorage/isValidDateISOString/isValidDateISOString.ts","../src/services/storage/createStorage/formatForStorage/storageFormat.ts","../src/services/storage/createStorage/createStorage.ts","../src/utils/isEqualShallow/isEqualShallow.ts","../src/utils/observable/subscribeWithSelector/subscribeWithSelector.ts","../src/utils/getBuffer/getBuffer.ts","../src/modules/initializeClient/consts.ts","../src/utils/deferredPromise/createDeferredPromise.ts","../src/errors/CannotTrackError.ts","../src/services/crossTabBroadcast/crossTabBroadcast.schema.ts","../src/services/crossTabBroadcast/createCrossTabBroadcast/createCrossTabBroadcast.ts","../src/services/logger/createLogger/createLogger.ts","../src/errors/UnsafeNavigationUrlError.ts","../src/utils/assertSafeNavigationUrl/assertSafeNavigationUrl.ts","../src/utils/bufferToHex/bufferToHex.ts","../src/utils/compressRawPublicKey/compressRawPublicKey.ts","../src/services/keychain/createKeychainService/KeyNotFoundError.ts","../src/services/keychain/createKeychainService/utils/constants.ts","../src/services/keychain/createKeychainService/utils/deleteIndexedDBItem.ts","../src/services/keychain/createKeychainService/utils/getIndexedDBItem.ts","../src/services/keychain/createKeychainService/utils/setIndexedDBItem.ts","../src/services/keychain/createKeychainService/utils/openDatabase.ts","../src/services/keychain/createKeychainService/utils/withDatabase/withDatabase.ts","../src/services/keychain/createKeychainService/createKeychainService.ts","../src/errors/InvalidRealtimePublishError.ts","../src/errors/RealtimeNotConnectedError.ts","../src/services/realtime/createRealtimeService/createRealtimeService.ts","../src/utils/getKeychainIndexedDBName/getKeychainIndexedDBName.ts","../src/errors/MergeAccountsConfirmationError.ts","../src/errors/NoNetworkProvidersError.ts","../src/errors/WalletAlreadyLinkedToAnotherUserError.ts","../src/errors/WalletScreeningBlockedError.ts","../src/modules/captcha/isCaptchaRequired/isCaptchaRequired.ts","../src/modules/captcha/consumeCaptchaToken/consumeCaptchaToken.ts","../src/errors/MethodNotImplementedError.ts","../src/modules/captcha/setCaptchaToken/setCaptchaToken.ts","../src/modules/extension/hasExtension/hasExtension.ts","../src/modules/auth/createVisit/createVisit.ts","../src/modules/wallets/unverifiedWalletAccounts/setUnverifiedWalletAccounts/setUnverifiedWalletAccounts.ts","../src/modules/wallets/walletProvider/walletProviderKeyMap/updateWalletProviderKeysForVerifiedCredentials/updateWalletProviderKeysForVerifiedCredentials.ts","../src/modules/wallets/reconcileWalletAccountsAgainstClient/reconcileWalletAccountsAgainstClient.ts","../src/utils/getAppMetadata/getAppMetadata.ts","../src/modules/wallets/utils/formatSignInMessage/formatSignInMessage.ts","../src/modules/wallets/utils/getSignInMessage/createSignInMessageStatement/createSignInMessageStatement.ts","../src/modules/wallets/unverifiedWalletAccounts/removeUnverifiedWalletAccount/removeUnverifiedWalletAccount.ts","../src/utils/isError/isError.ts","../src/utils/isErrorWithCode/isErrorWithCode.ts","../src/modules/wallets/verifyMessageSignatureOwnership/verifyMessageSignatureOwnership.ts","../src/modules/wallets/networks/getSdkChainFromApiChainName/getSdkChainFromApiChainName.ts","../src/modules/wallets/networks/networkDataSchema/networkDataSchema.ts","../src/modules/wallets/networks/getNetworksData/getNetworksData.ts","../src/modules/wallets/networks/networkProviderBuilderRegistry/createNetworkProviderBuilderRegistry/createNetworkProviderBuilderRegistry.ts","../src/modules/wallets/networks/networkProviderBuilderRegistry/getNetworkProviderBuilderRegistry/getNetworkProviderBuilderRegistry.ts","../src/modules/wallets/networks/getNetworkProviders/getNetworkProviders.ts","../src/modules/wallets/networks/getNetworkProviderFromNetworkId/getNetworkProviderFromNetworkId.ts"],"sourcesContent":["import { BaseError } from './base';\n\nexport class UnavailableInServerSideError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(unavailableFeature: string) {\n    super({\n      cause: null,\n      code: 'unavailable_in_server_side_error',\n      docsUrl: null,\n      name: 'UnavailableInServerSideError',\n      shortMessage: `This function is not available in server-side rendering: ${unavailableFeature}`,\n    });\n  }\n}\n","/**\n * Indicates if the code is running in a server-side environment.\n  * @notInstrumented\n */\n// eslint-disable-next-line no-restricted-globals\nexport const isServerSideRendering = () => typeof window === 'undefined';\n","/* eslint-disable no-restricted-globals -- this is the abstraction for localStorage */\nimport { UnavailableInServerSideError } from '../../../errors/UnavailableInServerSideError';\nimport { isServerSideRendering } from '../../../utils/isServerSideRendering';\nimport type { StorageAdapter } from '../storage.types';\n\n/**\n * Creates a localStorage adapter.\n * @notInstrumented\n */\nexport const createLocalStorageAdapter = (): StorageAdapter => {\n  if (isServerSideRendering()) {\n    return {\n      getItem: (_key) =>\n        Promise.reject(\n          new UnavailableInServerSideError('createLocalStorageAdapter')\n        ),\n      removeItem: (_key) =>\n        Promise.reject(\n          new UnavailableInServerSideError('createLocalStorageAdapter')\n        ),\n      setItem: (_key, _value) =>\n        Promise.reject(\n          new UnavailableInServerSideError('createLocalStorageAdapter')\n        ),\n    };\n  }\n\n  return {\n    getItem: async (key) => localStorage.getItem(key),\n    removeItem: async (key) => localStorage.removeItem(key),\n    setItem: async (key, value) => localStorage.setItem(key, value),\n  };\n};\n","import { BaseError } from './base';\n\ntype InvalidStorageSetParams = {\n  key: string;\n  value: string;\n};\n\nexport class InvalidStorageSet extends BaseError {\n  constructor({ key, value }: InvalidStorageSetParams) {\n    super({\n      cause: null,\n      code: 'invalid_storage_set',\n      docsUrl: null,\n      metaMessages: [`key: ${key}`, value],\n      name: 'InvalidStorageSet',\n      shortMessage: 'Tried to store a value that does not match the schema',\n    });\n  }\n}\n","/**\n * Returns whether the given string is a valid ISO date string.\n *\n * Does not support timezone offsets.\n  * @notInstrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const isValidDateISOString = (value: string): boolean => {\n  const date = new Date(value);\n\n  return !isNaN(date.getTime()) && date.toISOString() === value;\n};\n","/* eslint-disable custom-rules/function-name-matches-filename */\nimport type { StorageFormat } from '../../storage.types';\nimport { isValidDateISOString } from './isValidDateISOString';\n\nconst DATE_PREFIX = '__DATE__';\n\n/** @notInstrumented */\nexport const formatForStorage = (value: unknown) => {\n  const item: StorageFormat<typeof value> = { value };\n\n  return JSON.stringify(item, (_, entry) => {\n    // You might think that entry here would be a Date and one could simply do \"entry instanceof Date\",\n    // but actually it will be a string already (no idea why JSON.stringify does this)\n    if (isValidDateISOString(entry)) {\n      return `${DATE_PREFIX}${entry}`;\n    }\n\n    return entry;\n  });\n};\n\n/** @notInstrumented */\n// eslint-disable-next-line custom-rules/one-function-per-file, custom-rules/require-single-object-param\nexport const parseFromStorage = <T>(value: string): StorageFormat<T> | null => {\n  try {\n    const parsed = JSON.parse(value, (_, entry) => {\n      if (typeof entry === 'string' && entry.startsWith(DATE_PREFIX)) {\n        return new Date(entry.slice(DATE_PREFIX.length));\n      }\n\n      return entry;\n    }) as StorageFormat<T>;\n\n    return parsed;\n    // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  } catch (error) {\n    return null;\n  }\n};\n","import type { Storage, StorageAdapter, StorageAdapterOptions, StorageTier } from '../storage.types';\nimport { InvalidStorageSet } from './../../../errors/InvalidStorageSet';\nimport { formatForStorage } from './formatForStorage';\nimport { parseFromStorage } from './formatForStorage/storageFormat';\n\ntype CreateWebStorageParams = {\n  prefix?: string;\n  storageAdapter: StorageAdapter;\n};\n\n/**\n * Creates a Storage service to interact with storage adapter.\n * Reads the `storageTier` from each key's config and passes it\n * to the adapter on every operation, defaulting to `'default'`.\n * @notInstrumented\n */\nexport const createStorage = ({\n  prefix = '',\n  storageAdapter,\n}: CreateWebStorageParams): Storage => {\n  const getPrefixedKey = (key: string) => (prefix ? `${prefix}_${key}` : key);\n\n  const getAdapterOptions = (storageTier?: StorageTier): StorageAdapterOptions => ({\n    storageTier: storageTier ?? 'default',\n  });\n\n  return {\n    getItem: async (storageKeySchema) => {\n      const prefixedKey = getPrefixedKey(storageKeySchema.key);\n      const options = getAdapterOptions(storageKeySchema.config?.storageTier);\n\n      const rawItem = await storageAdapter.getItem(prefixedKey, options);\n\n      const parsedItem = rawItem ? parseFromStorage(rawItem) : null;\n\n      /**\n       * The item saved to localStorage may be malformed.\n       * In this case, we remove it and return null.\n       */\n      if (parsedItem !== null) {\n        const parsed = storageKeySchema.schema.safeParse(parsedItem.value);\n\n        if (parsed.success) {\n          return parsed.data;\n        }\n      }\n\n      /**\n       * The item saved to localStorage may be malformed.\n       * In this case, we remove it and return null.\n       */\n\n      await storageAdapter.removeItem(prefixedKey, options);\n\n      return null;\n    },\n\n    removeItem: async (storageKeySchema) => {\n      await storageAdapter.removeItem(\n        getPrefixedKey(storageKeySchema.key),\n        getAdapterOptions(storageKeySchema.config?.storageTier),\n      );\n    },\n\n    setItem: async (storageKeySchema, value) => {\n      const parsed = storageKeySchema.schema.safeParse(value);\n\n      if (!parsed.success) {\n        throw new InvalidStorageSet({\n          key: storageKeySchema.key,\n          value: JSON.stringify(value),\n        });\n      }\n\n      const item = formatForStorage(parsed.data);\n\n      await storageAdapter.setItem(\n        getPrefixedKey(storageKeySchema.key),\n        item,\n        getAdapterOptions(storageKeySchema.config?.storageTier),\n      );\n    },\n  };\n};\n","/**\n * Shallow compare two objects.\n *\n * Source: https://github.com/pmndrs/zustand/blob/main/src/vanilla/shallow.ts\n  * @notInstrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const isEqualShallow = <T>(objA: T, objB: T) => {\n  if (Object.is(objA, objB)) return true;\n\n  if (\n    typeof objA !== 'object' ||\n    objA === null ||\n    typeof objB !== 'object' ||\n    objB === null\n  ) {\n    return objA === objB;\n  }\n\n  if (objA instanceof Map && objB instanceof Map) {\n    if (objA.size !== objB.size) return false;\n\n    for (const [key, value] of objA) {\n      if (!Object.is(value, objB.get(key))) return false;\n    }\n\n    return true;\n  }\n\n  if (objA instanceof Set && objB instanceof Set) {\n    if (objA.size !== objB.size) return false;\n\n    for (const value of objA) {\n      if (!objB.has(value)) return false;\n    }\n    return true;\n  }\n\n  const keysA = Object.keys(objA);\n\n  if (keysA.length !== Object.keys(objB).length) return false;\n\n  for (const keyA of keysA) {\n    if (\n      !Object.prototype.hasOwnProperty.call(objB, keyA as string) ||\n      !Object.is(objA[keyA as keyof T], objB[keyA as keyof T])\n    ) {\n      return false;\n    }\n  }\n\n  if (objA.constructor !== objB.constructor) return false;\n\n  return true;\n};\n","import { isEqualShallow } from '../../isEqualShallow';\nimport type { ObservableState } from '../observable.types';\n\n/**\n * Allows subscribing to a slice of the state.\n * The slice is a computation of the states.\n *\n * The callback will only be called when the slice has changed.\n * Change is determined by shallow comparison.\n *\n * Returns a function to unsubscribe the callback.\n  * @notInstrumented\n */\nexport const subscribeWithSelector =\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  <T extends Record<string, unknown>, Slice>(\n    observable: ObservableState<T>,\n    selector: (value: T) => Slice\n  ) =>\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  (callback: (slice: Slice) => void) => {\n    let lastSlice = selector(observable.get());\n\n    return observable.subscribe((value) => {\n      const nextSlice = selector(value);\n\n      if (isEqualShallow(nextSlice, lastSlice)) return;\n\n      lastSlice = nextSlice;\n\n      callback(nextSlice);\n    });\n  };\n","/* eslint-disable no-restricted-globals */\nimport { Buffer as BufferPolyfill } from 'buffer';\n\n/** @notInstrumented */\nexport const getBuffer = () =>\n  typeof Buffer !== 'undefined' ? Buffer : BufferPolyfill;\n","export const REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY =\n  'refresh-user-state-from-cookie';\n\nexport const INITIALIZE_STORAGE_SYNC_TRACKER_KEY = 'initialize-storage-sync';\n\nexport const FETCH_PROJECT_SETTINGS_TRACKER_KEY = 'fetch-project-settings';\n\nexport const GENERATE_SESSION_KEYS_TRACKER_KEY = 'generate-session-keys';\n\nexport const REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY =\n  'refresh-user-state-from-valid-token';\n","import type { DeferredPromise } from './deferredPromise.types';\n\n/** @notInstrumented */\nexport const createDeferredPromise = <T>(): DeferredPromise<T> => {\n  let resolve: (value: T) => void;\n  let reject: (reason?: unknown) => void;\n\n  const promise = new Promise<T>((_resolve, _reject) => {\n    resolve = _resolve;\n    reject = _reject;\n  });\n\n  return {\n    promise,\n    reject: (reason?: unknown) => reject?.(reason),\n    resolve: (value: T) => resolve?.(value),\n  };\n};\n","import { BaseError } from './base';\n\nexport class CannotTrackError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'cannot_track_error',\n      docsUrl: null,\n      name: 'CannotTrackError',\n      shortMessage: 'All track calls must be performed in the same node tick',\n    });\n  }\n}\n","import * as z from 'zod/mini';\n\n/**\n * Schema for validating cross-tab broadcast messages.\n */\nexport const CrossTabBroadcastMessageSchema = z.object({\n  args: z.optional(z.unknown()),\n  event: z.string(),\n});\n","import EventEmitter from 'eventemitter3';\n\nimport { isServerSideRendering } from '../../../utils/isServerSideRendering';\nimport { CrossTabBroadcastMessageSchema } from '../crossTabBroadcast.schema';\nimport type { CrossTabBroadcast } from '../crossTabBroadcast.types';\n\ntype CreateCrossTabBroadcastParams = {\n  channelName: string;\n};\n\n/**\n * Creates a cross-tab broadcast service instance using the BroadcastChannel API.\n *\n * Enables communication between multiple tabs/windows of the same application.\n * Messages are validated against the schema and invalid messages are silently ignored.\n *\n * In SSR or when BroadcastChannel is unavailable, returns a no-op implementation.\n *\n * @param params - Configuration parameters\n * @param params.channelName - The name of the broadcast channel to use\n * @returns A cross-tab broadcast service instance\n  * @notInstrumented\n */\nexport const createCrossTabBroadcast = ({\n  channelName,\n}: CreateCrossTabBroadcastParams): CrossTabBroadcast => {\n  // SSR check - return no-op implementation\n  // eslint-disable-next-line no-restricted-globals\n  if (isServerSideRendering() || typeof BroadcastChannel === 'undefined') {\n    return {\n      off: () => {},\n      on: () => {},\n      send: () => {},\n    };\n  }\n\n  // eslint-disable-next-line no-restricted-globals\n  const channel = new BroadcastChannel(channelName);\n  const eventEmitter = new EventEmitter();\n\n  // Message handler with validation\n  const handleMessage = (messageEvent: MessageEvent) => {\n    const parsed = CrossTabBroadcastMessageSchema.safeParse(messageEvent.data);\n\n    if (!parsed.success) {\n      // Silently ignore invalid messages (consistent with storage patterns)\n      return;\n    }\n\n    const { args, event } = parsed.data;\n    eventEmitter.emit(event, args);\n  };\n\n  channel.addEventListener('message', handleMessage);\n\n  return {\n    off: (event, callback) => {\n      eventEmitter.off(event, callback);\n    },\n\n    on: (event, callback) => {\n      eventEmitter.on(event, callback);\n    },\n\n    send: ({ args, event }) => {\n      channel.postMessage({ args, event });\n    },\n  };\n};\n","import { EventEmitter } from 'eventemitter3';\n\nimport type { LogLevel, Logger, LoggerEventEmitter } from '../logger.types';\n\n/**\n * Configuration options for the logger\n  * @notInstrumented\n */\ntype CreateLoggerOptions = {\n  level?: LogLevel;\n};\n\n/**\n * Log levels and their corresponding numeric values\n */\nconst LOG_LEVELS: Record<LogLevel, number> = {\n  debug: 0,\n  error: 3,\n  info: 1,\n  warn: 2,\n};\n\n// Assign to avoid lint errors\nconst defaultConsole = console;\n\n/**\n * Creates a logger instance with configurable log level and event emission capabilities.\n * @returns A logger instance with debug, info, warn, and error methods\n * @notInstrumented\n */\nexport const createLogger = (options: CreateLoggerOptions = {}): Logger => {\n  const eventEmitter: LoggerEventEmitter = new EventEmitter();\n\n  // Default to 'debug' if no level is provided\n  const minLevel: LogLevel = options.level ?? 'warn';\n\n  // Helper to decide if we should log based on current log level\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const shouldLog = (level: LogLevel): boolean => {\n    return LOG_LEVELS[level] >= LOG_LEVELS[minLevel];\n  };\n\n  // Helper to format the log message\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const formatMessage = (level: LogLevel, message: string): string => {\n    const timestamp = new Date().toISOString();\n\n    return `[${timestamp}] ${level.toUpperCase()}: ${message}`;\n  };\n\n  // Unified logger function that checks the level and calls the appropriate console method\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const log = (\n    level: LogLevel,\n    consoleMethod: (...data: unknown[]) => void,\n    message: string,\n    ...args: unknown[]\n  ) => {\n    eventEmitter.emit('log', level, message, ...args);\n\n    if (!shouldLog(level)) return;\n\n    consoleMethod(formatMessage(level, message), ...args);\n  };\n\n  return {\n    debug: (message, ...args) =>\n      log('debug', defaultConsole.debug, message, ...args),\n\n    error: (message, ...args) =>\n      log('error', defaultConsole.error, message, ...args),\n\n    info: (message, ...args) =>\n      log('info', defaultConsole.info, message, ...args),\n\n    off: eventEmitter.off.bind(eventEmitter),\n\n    on: eventEmitter.on.bind(eventEmitter),\n    warn: (message, ...args) =>\n      log('warn', defaultConsole.warn, message, ...args),\n  };\n};\n","import { BaseError } from './base';\n\ntype UnsafeNavigationUrlErrorParams = {\n  scheme: string;\n};\n\n/**\n * Thrown when navigation is attempted to a URL whose scheme is not in the\n * allowlist (only `http:` and `https:` are permitted). Guards against DOM XSS\n * (`javascript:` URIs) and other dangerous schemes (`data:`, `blob:`, etc.)\n * that could originate from a poisoned server response or cached project\n * settings flowing into `window.location.href`.\n */\nexport class UnsafeNavigationUrlError extends BaseError {\n  constructor({ scheme }: UnsafeNavigationUrlErrorParams) {\n    super({\n      cause: null,\n      code: 'unsafe_navigation_url_error',\n      docsUrl: null,\n      name: 'UnsafeNavigationUrlError',\n      shortMessage: `Refusing to navigate to a URL with an unsafe scheme \"${scheme}\". Only http: and https: URLs are allowed. This may indicate a compromised or misconfigured auth URL.`,\n    });\n  }\n}\n","import { UnsafeNavigationUrlError } from '../../errors/UnsafeNavigationUrlError';\n\n/**\n * The only URL schemes permitted for navigation. Everything else — most\n * importantly `javascript:` (DOM XSS) as well as `data:`, `blob:`, `file:`,\n * etc. — is rejected.\n */\nconst ALLOWED_NAVIGATION_SCHEMES = new Set(['http:', 'https:']);\n\n/**\n * Asserts that the given URL is safe to navigate to, i.e. its scheme is in the\n * allowlist (`http:`/`https:`). Used as a defense-in-depth guard wherever a\n * server-supplied or cached URL flows into navigation, preventing DOM XSS via\n * `javascript:` URIs and open redirects via other dangerous schemes.\n *\n * @param url - The URL string or parsed URL to validate.\n * @throws {UnsafeNavigationUrlError} If the URL cannot be parsed or its scheme is not allowed.\n * @notInstrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const assertSafeNavigationUrl = (url: string | URL): void => {\n  let parsed: URL;\n\n  try {\n    parsed = url instanceof URL ? url : new URL(url);\n  } catch {\n    // An unparseable URL is treated as unsafe rather than allowed through.\n    throw new UnsafeNavigationUrlError({ scheme: 'unknown' });\n  }\n\n  if (!ALLOWED_NAVIGATION_SCHEMES.has(parsed.protocol)) {\n    throw new UnsafeNavigationUrlError({ scheme: parsed.protocol });\n  }\n};\n","/**\n * Converts an ArrayBuffer or Uint8Array to a hex-encoded string\n  * @notInstrumented\n */\nexport const bufferToHex = (buffer: ArrayBufferLike | Uint8Array) =>\n  [...(buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer))]\n    .map((x) => x.toString(16).padStart(2, '0'))\n    .join('');\n","/**\n * Accepts a public key array buffer, and returns a buffer with the compressed version of the public key\n  * @notInstrumented\n */\nexport const compressRawPublicKey = (rawPublicKey: ArrayBuffer) => {\n  const rawPublicKeyBytes = new Uint8Array(rawPublicKey);\n  const len = rawPublicKeyBytes.byteLength;\n\n  // Drop the y coordinate\n  const compressedBytes = rawPublicKeyBytes.slice(0, (1 + len) >>> 1);\n\n  // Encode the parity of `y` in first bit\n  compressedBytes[0] = 0x2 | (rawPublicKeyBytes[len - 1] & 0x01);\n  return compressedBytes.buffer;\n};\n","import { BaseError } from '../../../errors/base';\n\nexport class KeyNotFoundError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(keyName: string) {\n    super({\n      cause: null,\n      code: 'key_not_found',\n      docsUrl: null,\n      name: 'KeyNotFoundError',\n      shortMessage: `Key \"${keyName}\" not found in keychain`,\n    });\n  }\n}\n","export const STORE_NAME = 'keys';\n","import { STORE_NAME } from './constants';\n\nexport type DeleteIndexedDBItemOptions = {\n  /** The IndexedDB database handle. */\n  db: IDBDatabase;\n\n  /** The key name to delete. */\n  keyName: string;\n};\n\n/** @notInstrumented */\nexport const deleteIndexedDBItem = ({\n  db,\n  keyName,\n}: DeleteIndexedDBItemOptions): Promise<void> =>\n  new Promise((resolve, reject) => {\n    const transaction = db.transaction(STORE_NAME, 'readwrite');\n    const store = transaction.objectStore(STORE_NAME);\n    const request = store.delete(keyName);\n\n    request.onsuccess = () => resolve();\n    request.onerror = () => reject(request.error as Error);\n  });\n","import type { StoredKey } from '../createKeychainService.types';\nimport { STORE_NAME } from './constants';\n\nexport type GetIndexedDBItemOptions = {\n  /** The IndexedDB database handle. */\n  db: IDBDatabase;\n\n  /** The key name to look up. */\n  keyName: string;\n};\n\n/** @notInstrumented */\nexport const getIndexedDBItem = ({\n  db,\n  keyName,\n}: GetIndexedDBItemOptions): Promise<StoredKey | undefined> =>\n  new Promise((resolve, reject) => {\n    const transaction = db.transaction(STORE_NAME, 'readonly');\n    const store = transaction.objectStore(STORE_NAME);\n    const request = store.get(keyName);\n\n    request.onsuccess = () => resolve(request.result as StoredKey | undefined);\n    request.onerror = () => reject(request.error as Error);\n  });\n","import type { StoredKey } from '../createKeychainService.types';\nimport { STORE_NAME } from './constants';\n\nexport type SetIndexedDBItemOptions = {\n  /** The IndexedDB database handle. */\n  db: IDBDatabase;\n\n  /** The stored key entry to write. */\n  entry: StoredKey;\n};\n\n/** @notInstrumented */\nexport const setIndexedDBItem = ({\n  db,\n  entry,\n}: SetIndexedDBItemOptions): Promise<void> =>\n  new Promise((resolve, reject) => {\n    const transaction = db.transaction(STORE_NAME, 'readwrite');\n    const store = transaction.objectStore(STORE_NAME);\n    const request = store.put(entry);\n\n    request.onsuccess = () => resolve();\n    request.onerror = () => reject(request.error as Error);\n  });\n","import { STORE_NAME } from './constants';\n\nconst createStoreIfMissing = (db: IDBDatabase): void => {\n  if (!db.objectStoreNames.contains(STORE_NAME)) {\n    db.createObjectStore(STORE_NAME, { keyPath: 'keyName' });\n  }\n};\n\n/** @notInstrumented */\n// eslint-disable-next-line custom-rules/require-single-object-param\nconst openConnection = (\n  dbName: string,\n  version?: number\n): Promise<IDBDatabase> =>\n  new Promise((resolve, reject) => {\n    const shouldUseCurrentVersion = version === undefined;\n\n    let request: IDBOpenDBRequest;\n    if (shouldUseCurrentVersion) {\n      request = indexedDB.open(dbName);\n    } else {\n      request = indexedDB.open(dbName, version);\n    }\n\n    request.onupgradeneeded = () => createStoreIfMissing(request.result);\n\n    request.onsuccess = () => resolve(request.result);\n    request.onerror = () => reject(request.error as Error);\n  });\n\n/**\n * Opens the keychain IndexedDB connection, recovering from a corrupted schema.\n * If the database exists but is missing the expected object store (e.g. an\n * upgrade interrupted by a reload on iOS WebKit leaves the DB committed at its\n * version with the store creation rolled back), it reopens at the next version\n * so onupgradeneeded fires and recreates only the missing store. Existing data\n * is preserved — the database is never deleted.\n * @notInstrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param, custom-rules/one-function-per-file\nexport const openDatabase = async (dbName: string): Promise<IDBDatabase> => {\n  const db = await openConnection(dbName);\n\n  if (db.objectStoreNames.contains(STORE_NAME)) {\n    return db;\n  }\n\n  // The database exists but is missing the object store. Reopening at the same\n  // version won't re-run onupgradeneeded, so any transaction would keep\n  // throwing NotFoundError. Bump the version to trigger an upgrade that\n  // recreates the store, leaving any other stored data intact.\n  const nextVersion = db.version + 1;\n  db.close();\n\n  return openConnection(dbName, nextVersion);\n};\n","import { openDatabase } from '../openDatabase';\n\ntype WithDatabaseParams<T> = {\n  dbName: string;\n  operation: (db: IDBDatabase) => Promise<T>;\n};\n\n// DOMException names for transient IndexedDB failures. These commonly occur on\n// iOS WebKit when a webview reload closes the connection mid-operation; opening\n// a fresh connection and retrying once usually succeeds.\nconst RETRYABLE_ERROR_NAMES = new Set([\n  'InvalidStateError',\n  'UnknownError',\n  'AbortError',\n  'TransactionInactiveError',\n]);\n\nconst isRetryableError = (error: unknown): boolean =>\n  error instanceof DOMException && RETRYABLE_ERROR_NAMES.has(error.name);\n\nconst runInDatabase = async <T>({\n  dbName,\n  operation,\n}: WithDatabaseParams<T>): Promise<T> => {\n  const db = await openDatabase(dbName);\n  try {\n    const result = await operation(db);\n\n    return result;\n  } finally {\n    db.close();\n  }\n};\n\n/**\n * Scopes a database connection to the lifetime of a callback.\n * Opens a connection, passes it to the operation, and guarantees\n * the connection is closed when the operation completes or throws.\n * Retries once on transient IndexedDB errors with a fresh connection.\n * @notInstrumented\n */\n// eslint-disable-next-line custom-rules/one-function-per-file\nexport const withDatabase = async <T>(\n  params: WithDatabaseParams<T>\n): Promise<T> => {\n  try {\n    return await runInDatabase(params);\n  } catch (error) {\n    if (!isRetryableError(error)) {\n      throw error;\n    }\n\n    return runInDatabase(params);\n  }\n};\n","import { bufferToHex } from '../../../utils/bufferToHex';\nimport { compressRawPublicKey } from '../../../utils/compressRawPublicKey';\nimport type {\n  CreateKeychainService,\n  StoredKey,\n} from './createKeychainService.types';\nimport { KeyNotFoundError } from './KeyNotFoundError';\nimport { deleteIndexedDBItem } from './utils/deleteIndexedDBItem';\nimport { getIndexedDBItem } from './utils/getIndexedDBItem';\nimport { setIndexedDBItem } from './utils/setIndexedDBItem';\nimport { withDatabase } from './utils/withDatabase';\n\nconst DEFAULT_DB_NAME = 'dynamic_keychain';\n\n/** @notInstrumented */\nexport const createKeychainService: CreateKeychainService = (params) => {\n  const dbName = params?.dbName ?? DEFAULT_DB_NAME;\n\n  // In-memory key cache, keyed by keyName. sign() prefers this over IndexedDB\n  // so that a cross-tab key rotation in the shared IndexedDB does not silently\n  // swap the signing key out from under the current session.\n  const memoryKeys = new Map<string, StoredKey>();\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const generateKey = async (keyName: string): Promise<string> => {\n    const keyPair = await crypto.subtle.generateKey(\n      { name: 'ECDSA', namedCurve: 'P-256' },\n      false,\n      ['sign']\n    );\n\n    const rawPublicKey = await crypto.subtle.exportKey(\n      'raw',\n      keyPair.publicKey\n    );\n\n    const compressedPublicKey = compressRawPublicKey(rawPublicKey);\n    const publicKeyHex = bufferToHex(compressedPublicKey);\n\n    const entry: StoredKey = {\n      keyName,\n      privateKey: keyPair.privateKey,\n      publicKeyHex,\n    };\n\n    memoryKeys.set(keyName, entry);\n\n    await withDatabase({\n      dbName,\n      operation: (db) => setIndexedDBItem({ db, entry }),\n    });\n\n    return publicKeyHex;\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const importKey = async (\n    keyName: string,\n    jwk: JsonWebKey\n  ): Promise<string> => {\n    const privateKey = await crypto.subtle.importKey(\n      'jwk',\n      jwk,\n      { name: 'ECDSA', namedCurve: 'P-256' },\n      false,\n      ['sign']\n    );\n\n    const publicJwk = { crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y };\n\n    const publicCryptoKey = await crypto.subtle.importKey(\n      'jwk',\n      publicJwk,\n      { name: 'ECDSA', namedCurve: 'P-256' },\n      true,\n      ['verify']\n    );\n\n    const rawPublicKey = await crypto.subtle.exportKey('raw', publicCryptoKey);\n    const compressedPublicKey = compressRawPublicKey(rawPublicKey);\n    const publicKeyHex = bufferToHex(compressedPublicKey);\n\n    const entry: StoredKey = { keyName, privateKey, publicKeyHex };\n\n    memoryKeys.set(keyName, entry);\n\n    await withDatabase({\n      dbName,\n      operation: (db) => setIndexedDBItem({ db, entry }),\n    });\n\n    return publicKeyHex;\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const getPublicKey = async (keyName: string): Promise<string | null> => {\n    const cached = memoryKeys.get(keyName);\n    if (cached) {\n      return cached.publicKeyHex;\n    }\n\n    const entry = await withDatabase({\n      dbName,\n      operation: (db) => getIndexedDBItem({ db, keyName }),\n    });\n\n    return entry?.publicKeyHex ?? null;\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const sign = async (keyName: string, message: string): Promise<string> => {\n    // Prefer the in-memory key so that a cross-tab IndexedDB key rotation\n    // does not cause this tab to sign with a foreign private key.\n    const entry =\n      memoryKeys.get(keyName) ??\n      (await withDatabase({\n        dbName,\n        operation: (db) => getIndexedDBItem({ db, keyName }),\n      }));\n\n    if (!entry) {\n      throw new KeyNotFoundError(keyName);\n    }\n\n    const encoder = new TextEncoder();\n    const data = encoder.encode(message);\n\n    const signature = await crypto.subtle.sign(\n      { hash: { name: 'SHA-256' }, name: 'ECDSA' },\n      entry.privateKey,\n      data\n    );\n\n    return bufferToHex(signature);\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const hasKey = async (keyName: string): Promise<boolean> => {\n    if (memoryKeys.has(keyName)) {\n      return true;\n    }\n\n    const entry = await withDatabase({\n      dbName,\n      operation: (db) => getIndexedDBItem({ db, keyName }),\n    });\n\n    return entry !== undefined;\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const removeKey = async (keyName: string): Promise<void> => {\n    memoryKeys.delete(keyName);\n\n    await withDatabase({\n      dbName,\n      operation: (db) => deleteIndexedDBItem({ db, keyName }),\n    });\n  };\n\n  return {\n    generateKey,\n    getPublicKey,\n    hasKey,\n    importKey,\n    removeKey,\n    sign,\n  };\n};\n","import { BaseError } from './base';\n\ntype InvalidRealtimePublishParams = {\n  channel: string;\n};\n\nexport class InvalidRealtimePublishError extends BaseError {\n  constructor({ channel }: InvalidRealtimePublishParams) {\n    super({\n      cause: null,\n      code: 'invalid_realtime_publish',\n      docsUrl: null,\n      metaMessages: [`channel: ${channel}`],\n      name: 'InvalidRealtimePublishError',\n      shortMessage:\n        'Tried to publish data that does not match the channel schema',\n    });\n  }\n}\n","import { BaseError } from './base';\n\nexport class RealtimeNotConnectedError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'realtime_not_connected_error',\n      docsUrl: null,\n      name: 'RealtimeNotConnectedError',\n      shortMessage:\n        'Realtime service is not connected. Call connect() before subscribing or publishing.',\n    });\n  }\n}\n","import type { InboundMessage, RealtimeChannel, messageCallback } from 'ably';\nimport type { BaseRealtime } from 'ably/modular';\nimport EventEmitter from 'eventemitter3';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { InvalidRealtimePublishError } from '../../../errors/InvalidRealtimePublishError';\nimport { RealtimeNotConnectedError } from '../../../errors/RealtimeNotConnectedError';\nimport { createApiClient } from '../../../modules/apiClient';\nimport { isServerSideRendering } from '../../../utils/isServerSideRendering';\nimport type {\n  RealtimeChannelSchema,\n  RealtimeConnectionState,\n  RealtimeEventMap,\n  RealtimeService,\n} from '../realtime.types';\n\nconst ABLY_STATE_TO_REALTIME_STATE: Record<string, RealtimeConnectionState> = {\n  closed: 'closed',\n  closing: 'closing',\n  connected: 'connected',\n  connecting: 'connecting',\n  disconnected: 'disconnected',\n  failed: 'failed',\n  initialized: 'idle',\n  suspended: 'suspended',\n};\n\nconst mapAblyState = (ablyState: string): RealtimeConnectionState =>\n  ABLY_STATE_TO_REALTIME_STATE[ablyState] ?? 'idle';\n\n/**\n * Creates a realtime pub/sub service backed by Ably.\n *\n * The service starts idle. Call `connect({ client })` to establish\n * a connection, passing the DynamicClient explicitly.\n *\n * SSR environments receive a no-op implementation.\n  * @notInstrumented\n */\n \nexport const createRealtimeService = (): RealtimeService => {\n  if (isServerSideRendering()) {\n    return {\n      connect: () => Promise.resolve(),\n      disconnect: () => {},\n      getConnectionState: () => 'idle',\n      off: () => {},\n      on: () => {},\n      publish: () => Promise.resolve(),\n      subscribe: () => Promise.resolve(),\n      unsubscribe: () => {},\n    };\n  }\n\n  const eventEmitter = new EventEmitter<RealtimeEventMap>();\n  const channels = new Map<string, RealtimeChannel>();\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  const handlerMap = new WeakMap<(message: { data: any }) => void, messageCallback<InboundMessage>>();\n\n  let ablyClient: BaseRealtime | undefined;\n  let connectionState: RealtimeConnectionState = 'idle';\n  let isConnecting = false;\n\n  const setConnectionState = (state: RealtimeConnectionState) => {\n    connectionState = state;\n    eventEmitter.emit('connectionStateChange', state);\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const getOrCreateChannel = (channelName: string): RealtimeChannel => {\n    const existing = channels.get(channelName);\n\n    if (existing) {\n      return existing;\n    }\n\n    if (!ablyClient) {\n      throw new RealtimeNotConnectedError();\n    }\n\n    const channel = ablyClient.channels.get(channelName);\n    channels.set(channelName, channel);\n\n    return channel;\n  };\n\n  const connect: RealtimeService['connect'] = async ({ client, headers }) => {\n    if (isConnecting) {\n      return;\n    }\n\n    isConnecting = true;\n\n    try {\n      const core = getCore(client);\n\n      if (ablyClient) {\n        ablyClient.close();\n        channels.clear();\n      }\n\n      // Dynamic import to keep the module tree-shakeable\n      // and avoid loading Ably in SSR environments\n      const {\n        BaseRealtime: AblyBaseRealtime,\n        FetchRequest,\n        WebSocketTransport,\n      } = await import('ably/modular');\n\n      ablyClient = new AblyBaseRealtime({\n        // authCallback must return void (not Promise<void>), so we use\n        // .then().catch() instead of async/await to avoid returning a Promise\n        // to Ably's callback-style auth handler.\n        authCallback: (_tokenParams, callback) => {\n          const apiClient = createApiClient({ headers }, client);\n\n          apiClient\n            .getRealtimeAuthToken({ environmentId: core.environmentId })\n            .then((response) => {\n              callback(null, response.token);\n            })\n            .catch((err: unknown) => {\n              const message = err instanceof Error ? err.message : String(err);\n              callback(message, null);\n            });\n        },\n        autoConnect: false,\n        plugins: { FetchRequest, WebSocketTransport },\n      });\n\n      ablyClient.connection.on((stateChange) => {\n        setConnectionState(mapAblyState(stateChange.current));\n      });\n\n      ablyClient.connect();\n    } finally {\n      isConnecting = false;\n    }\n  };\n\n  const disconnect: RealtimeService['disconnect'] = () => {\n    if (!ablyClient) {\n      return;\n    }\n\n    for (const channel of channels.values()) {\n      channel.detach().catch(() => {});\n    }\n\n    channels.clear();\n    ablyClient.close();\n    ablyClient = undefined;\n  };\n\n  const subscribe: RealtimeService['subscribe'] = async <T>({\n    channelSchema,\n    callback,\n  }: {\n    callback: (message: { data: T }) => void;\n    channelSchema: RealtimeChannelSchema<T>;\n  }) => {\n    const channel = getOrCreateChannel(channelSchema.channel);\n\n    const handler: messageCallback<InboundMessage> = (message) => {\n      const parsed = channelSchema.schema.safeParse(message.data);\n\n      if (!parsed.success) {\n        return;\n      }\n\n      callback({ data: parsed.data });\n    };\n\n    handlerMap.set(callback, handler);\n\n    await channel.subscribe(handler);\n  };\n\n  const unsubscribe: RealtimeService['unsubscribe'] = <T>({\n    channelSchema,\n    callback,\n  }: {\n    callback: (message: { data: T }) => void;\n    channelSchema: RealtimeChannelSchema<T>;\n  }) => {\n    const channel = channels.get(channelSchema.channel);\n\n    if (!channel) {\n      return;\n    }\n\n    const handler = handlerMap.get(callback);\n\n    if (handler) {\n      channel.unsubscribe(handler);\n      handlerMap.delete(callback);\n    }\n  };\n\n  const publish: RealtimeService['publish'] = async <T>({\n    channelSchema,\n    data,\n  }: {\n    channelSchema: RealtimeChannelSchema<T>;\n    data: T;\n  }) => {\n    const parsed = channelSchema.schema.safeParse(data);\n\n    if (!parsed.success) {\n      throw new InvalidRealtimePublishError({ channel: channelSchema.channel });\n    }\n\n    const channel = getOrCreateChannel(channelSchema.channel);\n    await channel.publish('message', parsed.data);\n  };\n\n  return {\n    connect,\n    disconnect,\n    getConnectionState: () => connectionState,\n    off: (event, callback) => {\n      eventEmitter.off(event, callback);\n    },\n    on: (event, callback) => {\n      eventEmitter.on(event, callback);\n    },\n    publish,\n    subscribe,\n    unsubscribe,\n  };\n};\n","type GetKeychainIndexedDBNameParams = {\n  environmentId: string;\n};\n\n/**\n * Builds the IndexedDB database name used by the keychain service for a given\n * environment. Centralizing this avoids drift between the SDK and any\n * extension code that needs to read or migrate the same database.\n *\n * @param params.environmentId - The Dynamic environment id.\n * @returns The IndexedDB database name for the keychain.\n * @notInstrumented\n */\nexport const getKeychainIndexedDBName = ({\n  environmentId,\n}: GetKeychainIndexedDBNameParams): string =>\n  `dynamic_${environmentId}_keychain`;\n","import type { MergeConflicts } from '../modules/auth/mergeUserAccounts/mergeUserAccounts.types';\nimport { BaseError, type BaseErrorParameters } from './base';\n\nexport type MergeAccountsConfirmationErrorParameters =\n  Pick<BaseErrorParameters, 'cause'> & {\n    /**\n     * The field-level conflicts between the current user and the user that owns\n     * the credential being linked, when the two accounts hold different values\n     * for the same profile field. `undefined` when the merge has no conflicts\n     * to resolve.\n     */\n    mergeConflicts?: MergeConflicts;\n    /**\n     * The address of the wallet whose verification triggered the merge, when\n     * the merge was triggered by a wallet link.\n     */\n    walletAddress?: string;\n  };\n\n/**\n * Thrown during credential verification when the credential already belongs to\n * a different existing user, and the backend is offering to merge the two users\n * into one.\n *\n * Unlike {@link WalletAlreadyLinkedToAnotherUserError} (a hard rejection), this\n * is a recoverable prompt: the caller can complete the merge with\n * `mergeUserAccounts`. When the two accounts hold different values for the same\n * profile field, those differences are surfaced on {@link mergeConflicts} so\n * the caller can ask the user which value to keep and pass the resolutions to\n * `mergeUserAccounts`.\n *\n * @example\n * ```ts\n * try {\n *   await verifyWalletAccount({ walletAccount });\n * } catch (error) {\n *   if (error instanceof MergeAccountsConfirmationError) {\n *     // No conflicts: complete the merge directly.\n *     // With conflicts: let the user resolve error.mergeConflicts first.\n *     await mergeUserAccounts();\n *   }\n * }\n * ```\n * @see MergeConflicts\n * @see WalletAlreadyLinkedToAnotherUserError\n */\nexport class MergeAccountsConfirmationError extends BaseError {\n  mergeConflicts: MergeConflicts | undefined;\n\n  walletAddress: string | undefined;\n\n  constructor({\n    cause,\n    mergeConflicts,\n    walletAddress,\n  }: MergeAccountsConfirmationErrorParameters) {\n    super({\n      cause,\n      code: 'merge_accounts_confirmation',\n      docsUrl: null,\n      name: 'MergeAccountsConfirmationError',\n      shortMessage:\n        'This credential is already linked to another user; confirm to merge the accounts',\n    });\n\n    this.mergeConflicts = mergeConflicts;\n    this.walletAddress = walletAddress;\n  }\n}\n","import { BaseError } from './base';\n\nexport class NoNetworkProvidersError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'no_network_providers',\n      docsUrl: null,\n      name: 'NoNetworkProvidersError',\n      shortMessage: 'No networks were registered in the client',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class WalletAlreadyLinkedToAnotherUserError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'wallet_already_linked_to_another_user_error',\n      docsUrl: null,\n      name: 'WalletAlreadyLinkedToAnotherUserError',\n      shortMessage: 'This wallet is already linked to another user',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\n/**\n * Thrown when a wallet is rejected during verification because it failed the\n * project's compliance screening (e.g. it appears on a sanctions list).\n *\n * The screening runs server-side and is enabled per environment in the Dynamic\n * dashboard. This typed error lets consumers detect the blocked-wallet case and\n * render an \"access denied\" experience without having to inspect the raw API\n * error code themselves.\n *\n * @example\n * ```ts\n * try {\n *   await verifyWalletAccount({ walletAccount });\n * } catch (error) {\n *   if (error instanceof WalletScreeningBlockedError) {\n *     showAccessDeniedScreen();\n *   }\n * }\n * ```\n * @see verifyWalletAccount\n * @see connectAndVerifyWithWalletProvider\n */\nexport class WalletScreeningBlockedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'wallet_screening_blocked',\n      docsUrl: null,\n      name: 'WalletScreeningBlockedError',\n      shortMessage:\n        'This wallet was blocked by compliance screening and cannot be used',\n    });\n  }\n}\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/** @notInstrumented */\nexport const isCaptchaRequired = (client = getDefaultClient()) => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  const { security } = projectSettings;\n\n  // Prefer the provider-agnostic captcha field; fall back to the legacy hCaptcha field.\n  return security.captcha?.enabled ?? security.hCaptcha?.enabled ?? false;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { isCaptchaRequired } from '../isCaptchaRequired';\n\n/**\n * Retrieves the current captcha token from the client state and sets it to null.\n  * @notInstrumented\n */\nexport const consumeCaptchaToken = (\n  client: DynamicClient\n): string | undefined => {\n  const core = getCore(client);\n\n  const captchaToken = core.state.get().captchaToken;\n\n  if (isCaptchaRequired(client)) {\n    assertDefined(captchaToken, 'Captcha token is required');\n  }\n\n  core.state.set({\n    captchaToken: null,\n  });\n\n  return captchaToken ?? undefined;\n};\n","import { BaseError } from './base';\n\nexport class MethodNotImplementedError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(methodName: string) {\n    super({\n      cause: null,\n      code: 'method_not_implemented_error',\n      docsUrl: null,\n      name: 'MethodNotImplementedError',\n      shortMessage: `This method is not implemented: ${methodName}`,\n    });\n  }\n}\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\n\ntype SetCaptchaTokenProps = {\n  captchaToken: string;\n};\n\n/**\n * Sets the given captcha token in the client state.\n *\n * @param params.captchaToken - The captcha token to set.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @instrumented\n */\nexport const setCaptchaToken = (\n  { captchaToken }: SetCaptchaTokenProps,\n  client = getDefaultClient()\n) => {\n  const core = getCore(client);\n\n  core.state.set({\n    captchaToken,\n  });\n};\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\n\ntype HasExtensionParams = {\n  extensionKey: string;\n};\n\n/**\n * Checks if a specific extension has been applied to the Dynamic client.\n *\n * Extensions add optional features to the Dynamic SDK,\n * such as EVM, Solana, or other chain support.\n *\n * @param params.extensionKey - The unique key identifying the extension to check for.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if the extension is applied, false otherwise.\n  * @notInstrumented\n */\nexport const hasExtension = (\n  { extensionKey }: HasExtensionParams,\n  client = getDefaultClient()\n) => {\n  const core = getCore(client);\n\n  return core.extensions.has(extensionKey);\n};\n","import {\n  AuthModeEnum,\n  type ChainEnum,\n  type ConnectRequest,\n} from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { createApiClient } from '../../apiClient';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport { normalizeWalletNameWithChain } from '../../wallets/utils/normalizeWalletNameWithChain';\nimport type { WalletAccount } from '../../wallets/walletAccount';\n\ntype CreateVisitParams = {\n  authMode?: AuthModeEnum;\n  walletAccount: WalletAccount;\n};\n\n/*  \n  In older SDK versions we used to have the concept of \"connect-only\" vs \"connect-and-sign\". \n  The only difference in backend is it stores some extra data for connect-only, \n  so we can just default to using it.\n*/\n/** @notInstrumented */\nexport const createVisit = async (\n  { walletAccount, authMode = AuthModeEnum.Only }: CreateVisitParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  try {\n    const walletName = normalizeWalletNameWithChain({\n      chain: walletProvider.chain,\n      displayName: walletProvider.metadata.displayName,\n    });\n\n    const connectRequest: ConnectRequest = {\n      address: walletAccount.address,\n      authMode,\n      // eslint-disable-next-line custom-rules/ban-chain-enum\n      chain: walletProvider.chain as ChainEnum,\n      provider: walletProvider.walletProviderType,\n      walletName,\n    };\n\n    await apiClient.createVisit({\n      connectRequest,\n      environmentId: core.environmentId,\n    });\n  } catch (error) {\n    core.logger.error('Error creating visit', { error });\n  }\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport type { UnverifiedWalletAccount } from '../unverifiedWalletAccounts.types';\n\ntype SetUnverifiedWalletAccountsParams = {\n  unverifiedWalletAccountsToUpdate: UnverifiedWalletAccount[];\n};\n\n/**\n * Updates the unverified wallet account in the client state.\n * This will add new wallet accounts and override those with matching ids,\n * but will leave other preexisting wallet accounts unchanged.\n  * @notInstrumented\n */\nexport const setUnverifiedWalletAccounts = (\n  { unverifiedWalletAccountsToUpdate }: SetUnverifiedWalletAccountsParams,\n  client: DynamicClient\n): void => {\n  if (unverifiedWalletAccountsToUpdate.length === 0) {\n    return;\n  }\n\n  const core = getCore(client);\n\n  const unverifiedWalletAccountsToUpdateIds =\n    unverifiedWalletAccountsToUpdate.map(({ id }) => id);\n\n  const filteredUnverifiedWalletAccounts: UnverifiedWalletAccount[] = core.state\n    .get()\n    .unverifiedWalletAccounts.filter(\n      (unverifiedWalletAccount) =>\n        !unverifiedWalletAccountsToUpdateIds.includes(\n          unverifiedWalletAccount.id\n        )\n    );\n\n  core.state.set({\n    unverifiedWalletAccounts: [\n      ...filteredUnverifiedWalletAccounts,\n      ...unverifiedWalletAccountsToUpdate,\n    ],\n  });\n};\n","import { getCore } from '../../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../../client/types';\n\ntype updateWalletProviderKeysForVerifiedCredentialsParams = {\n  keysToUpdate: Record<string, string>;\n};\n\n/** @notInstrumented */\nexport const updateWalletProviderKeysForVerifiedCredentials = (\n  { keysToUpdate }: updateWalletProviderKeysForVerifiedCredentialsParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  core.state.set({\n    walletProviderKeyMap: {\n      ...core.state.get().walletProviderKeyMap,\n      ...keysToUpdate,\n    },\n  });\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { createVisit } from '../../auth/createVisit';\nimport { emitWalletAccountsChangedEvent } from '../emitWalletAccountsChangedEvent';\nimport { getWalletAccounts } from '../getWalletAccounts';\nimport { setUnverifiedWalletAccounts } from '../unverifiedWalletAccounts/setUnverifiedWalletAccounts';\nimport type { WalletAccount } from '../walletAccount';\nimport { updateWalletProviderKeysForVerifiedCredentials } from '../walletProvider/walletProviderKeyMap/updateWalletProviderKeysForVerifiedCredentials';\n\ntype ReconcileWalletAccountsAgainstClientParams = {\n  /** Whether to write new or updated unverified accounts to client state. Defaults to `true`. */\n  addToDynamicWalletAccounts?: boolean;\n  /** Freshly-connected wallet account candidates to reconcile. */\n  walletAccounts: WalletAccount[];\n  /** Wallet provider key these candidates were connected through. */\n  walletProviderKey: string;\n};\n\n/**\n * Reconciles freshly-connected wallet accounts against the client state. For\n * each candidate it classifies as new, a re-connect of an existing unverified\n * account, or a re-connect of an already-verified account, then runs the\n * appropriate state mutation (`setUnverifiedWalletAccounts`,\n * `updateWalletProviderKeysForVerifiedCredentials`, `createVisit` for truly-new\n * entries) and emits a single `walletAccountsChanged` event if anything\n * actually changed. Returns the candidates with `verifiedCredentialId`\n * populated when the address already corresponded to a verified credential.\n *\n * @notInstrumented\n */\nexport const reconcileWalletAccountsAgainstClient = (\n  {\n    addToDynamicWalletAccounts = true,\n    walletAccounts,\n    walletProviderKey,\n  }: ReconcileWalletAccountsAgainstClientParams,\n  client: DynamicClient\n): WalletAccount[] => {\n  if (walletAccounts.length === 0) {\n    return [];\n  }\n\n  const existingWalletAccounts = getWalletAccounts(client);\n\n  const newWalletAccounts: WalletAccount[] = [];\n  const unverifiedWalletAccountsToUpdate: WalletAccount[] = [];\n  const verifiedCredentialIdToWalletProviderKeyMap: Record<string, string> = {};\n\n  const reconciledWalletAccounts: WalletAccount[] = walletAccounts.map(\n    (candidate) => {\n      const matchingExistingWalletAccount = existingWalletAccounts.find(\n        (existingWalletAccount) => existingWalletAccount.id === candidate.id\n      );\n\n      if (!matchingExistingWalletAccount) {\n        newWalletAccounts.push(candidate);\n        return candidate;\n      }\n\n      const isWalletProviderKeyChanged =\n        matchingExistingWalletAccount.walletProviderKey !== walletProviderKey;\n\n      if (matchingExistingWalletAccount.verifiedCredentialId) {\n        if (isWalletProviderKeyChanged) {\n          verifiedCredentialIdToWalletProviderKeyMap[\n            matchingExistingWalletAccount.verifiedCredentialId\n          ] = walletProviderKey;\n        }\n\n        return {\n          ...candidate,\n          verifiedCredentialId:\n            matchingExistingWalletAccount.verifiedCredentialId,\n        };\n      }\n\n      if (isWalletProviderKeyChanged) {\n        unverifiedWalletAccountsToUpdate.push(candidate);\n      }\n\n      return candidate;\n    }\n  );\n\n  let walletAccountsChanged = false;\n\n  if (Object.keys(verifiedCredentialIdToWalletProviderKeyMap).length > 0) {\n    updateWalletProviderKeysForVerifiedCredentials(\n      { keysToUpdate: verifiedCredentialIdToWalletProviderKeyMap },\n      client\n    );\n\n    walletAccountsChanged = true;\n  }\n\n  if (addToDynamicWalletAccounts) {\n    const accountsToWrite = [\n      ...unverifiedWalletAccountsToUpdate,\n      ...newWalletAccounts,\n    ];\n\n    if (accountsToWrite.length > 0) {\n      setUnverifiedWalletAccounts(\n        { unverifiedWalletAccountsToUpdate: accountsToWrite },\n        client\n      );\n\n      walletAccountsChanged = true;\n\n      for (const newWalletAccount of newWalletAccounts) {\n        void createVisit({ walletAccount: newWalletAccount }, client);\n      }\n    }\n  }\n\n  if (walletAccountsChanged) {\n    emitWalletAccountsChangedEvent(client);\n  }\n\n  return reconciledWalletAccounts;\n};\n","import { getCore } from '../../client/core/getCore';\nimport type { DynamicClient } from '../../client/types';\n\nexport type AppMetadata = {\n  appLogoUrl: string | undefined;\n  appName: string;\n  appNativeLink?: string;\n  appUniversalLink?: string;\n};\n\n/**\n * Reads the customer-supplied app name, logo, native link, and universal link.\n * — preferring `core.metadata` (set on the client) over project-settings fallbacks.\n *\n * @param client - The Dynamic client whose configuration drives the result.\n * @notInstrumented\n */\nexport const getAppMetadata = (client: DynamicClient): AppMetadata => {\n  const core = getCore(client);\n  const generalSettings = client.projectSettings?.general;\n\n  return {\n    appLogoUrl: core.metadata?.iconUrl ?? generalSettings?.appLogo ?? undefined,\n    appName: core.metadata?.name ?? generalSettings?.displayName ?? '',\n    appNativeLink: core.metadata?.nativeLink,\n    appUniversalLink: core.metadata?.universalLink,\n  };\n};\n","type FormatSignInMessageParams = {\n  address: string;\n  blockchainName: string;\n  chainId?: string;\n  domain: string;\n  issuedAt?: string;\n  nonce: string;\n  requestId?: string;\n  resources?: string[];\n  statement?: string;\n  uri: string;\n};\n\n/**\n * Formats a sign in message to prove ownership of an address.\n  * @notInstrumented\n */\nexport const formatSignInMessage = async ({\n  domain,\n  blockchainName,\n  address,\n  uri,\n  chainId,\n  nonce,\n  issuedAt,\n  requestId,\n  statement,\n  resources,\n}: FormatSignInMessageParams) => {\n  // This format follows the sign-in with ethereum (SIWE) standard,\n  // but we are using it also for non-ethereum wallets for now (eg. Solana)\n  // for more context on format and fields, please see:\n  // https://docs.login.xyz/general-information/siwe-overview/eip-4361\n  const header = `${domain} wants you to sign in with your ${blockchainName} account:`;\n  const prefix = [header, address].join('\\n');\n\n  // If there is a statement, we want to add a gap between the prefix and the statement\n  // two times '\\n', first to move statement to next line and second to add a gap between prefix and statement\n  const prefixWithStatementGap = statement ? '\\n\\n' : '\\n';\n  const prefixWithStatement = `${[prefix, statement].join(\n    prefixWithStatementGap\n  )}\\n`;\n\n  const suffixFields: string[] = [];\n  suffixFields.push(`URI: ${uri}`);\n  suffixFields.push('Version: 1');\n  if (chainId) {\n    suffixFields.push(`Chain ID: ${chainId}`);\n  }\n\n  suffixFields.push(`Nonce: ${nonce}`);\n\n  if (issuedAt) {\n    suffixFields.push(`Issued At: ${issuedAt}`);\n  }\n\n  if (requestId) {\n    suffixFields.push(`Request ID: ${requestId}`);\n  }\n\n  if (resources?.length) {\n    suffixFields.push(\n      `Resources:${resources.map((resource) => '\\n- ' + resource).join()}`\n    );\n  }\n\n  const suffix = suffixFields.join('\\n');\n\n  return [prefixWithStatement, suffix].join('\\n');\n};\n","import type { DynamicClient } from '../../../../../client/types';\nimport { getAppMetadata } from '../../../../../utils/getAppMetadata';\n\n/** @notInstrumented */\nexport const createSignInMessageStatement = (client: DynamicClient) => {\n  const { appName } = getAppMetadata(client);\n\n  return `Welcome to ${appName}. Signing is the only way we can truly know that you are the owner of the wallet you are connecting. Signing is a safe, gas-less transaction that does not in any way give ${appName} permission to perform any transactions with your wallet.`;\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { checkAndRaiseWalletAccountsChangedEvent } from '../../../auth/updateAuthFromVerifyResponse/checkAndRaiseWalletAccountsChangedEvent';\nimport type { UnverifiedWalletAccount } from '../unverifiedWalletAccounts.types';\n\ntype RemoveUnverifiedWalletAccountParams = {\n  unverifiedWalletAccount: UnverifiedWalletAccount;\n};\n\n/**\n * Removes an unverified wallet account from the client's state.\n  * @notInstrumented\n */\nexport const removeUnverifiedWalletAccount = (\n  { unverifiedWalletAccount }: RemoveUnverifiedWalletAccountParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const previousState = core.state.get();\n\n  const { unverifiedWalletAccounts } = core.state.get();\n\n  const filteredUnverifiedWalletAccounts = unverifiedWalletAccounts.filter(\n    (account) => account.id !== unverifiedWalletAccount.id\n  );\n\n  core.state.set({\n    unverifiedWalletAccounts: filteredUnverifiedWalletAccounts,\n  });\n\n  /**\n   * We check before raising because the wallet account we are removing might still\n   * be present in wallet accounts due to having been moved to verified credentials.\n   */\n  checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);\n};\n","/**\n * Check if the given value is an Error object\n  * @notInstrumented\n */\nexport const isError = (error: unknown): error is Error =>\n  error instanceof Error;\n","import { isError } from '../isError';\n\n/**\n * Check if the given value is an Error object with a specific code\n  * @notInstrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const isErrorWithCode = <T extends string>(\n  error: unknown,\n  code: T\n): error is Error & { code: T } => {\n  if (!isError(error)) return false;\n\n  return 'code' in error && error.code === code;\n};\n","import type {\n  ChainEnum,\n  MergeConflicts,\n  TokenScope,\n  VerifyResponse,\n  WalletAddressType,\n  WalletProviderEnum,\n} from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { APIError } from '../../../errors/APIError';\nimport { isErrorWithCode } from '../../../utils/isErrorWithCode';\nimport { createApiClient } from '../../apiClient';\nimport { consumeCaptchaToken } from '../../captcha/consumeCaptchaToken';\nimport type { Chain } from '../../chain';\nimport { normalizeWalletNameWithChain } from '../utils/normalizeWalletNameWithChain';\nimport type { WalletAddressWithType } from '../walletAccount/walletAccount.types';\nimport { MergeAccountsConfirmationError } from './../../../errors/MergeAccountsConfirmationError';\nimport { WalletAlreadyLinkedToAnotherUserError } from './../../../errors/WalletAlreadyLinkedToAnotherUserError';\nimport { WalletScreeningBlockedError } from './../../../errors/WalletScreeningBlockedError';\n\ntype VerifyMessageSignatureOwnershipParams = {\n  addressesWithTypes?: WalletAddressWithType[];\n  chain: Chain;\n  isTransfer?: boolean;\n  messageToSign: string;\n  networkId?: string;\n  requestedScopes?: TokenScope[];\n  signature: string;\n  walletAddress: string;\n  walletDisplayName: string;\n  walletProviderType: WalletProviderEnum;\n};\n\n/**\n * Verifies a signed message by calling either the verifyLink, verifyTransfer or verify API function,\n * depending on whether the user is signing in, linking or transferring a wallet.\n *\n * Does NOT call updateAuthFromVerifyResponse, it should be called from the return of this function.\n * @throws MergeAccountsConfirmationError If the credential belongs to another user and the backend is offering to merge the accounts.\n * @throws WalletAlreadyLinkedToAnotherUserError If the wallet is already linked to another user.\n * @throws WalletScreeningBlockedError If the wallet was blocked by the project's compliance screening.\n  * @notInstrumented\n */\nexport const verifyMessageSignatureOwnership = async (\n  {\n    messageToSign,\n    walletAddress,\n    addressesWithTypes,\n    signature,\n    chain,\n    isTransfer = false,\n    walletDisplayName,\n    walletProviderType,\n    networkId,\n    requestedScopes,\n  }: VerifyMessageSignatureOwnershipParams,\n  client: DynamicClient\n): Promise<VerifyResponse> => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const walletName = normalizeWalletNameWithChain({\n    chain,\n    displayName: walletDisplayName,\n  });\n\n  let verifyApiFunction;\n\n  if (!client.user) {\n    // If the user is not authenticated, call the walletsSignin API function to sign in\n    verifyApiFunction = apiClient.walletsSignin.bind(apiClient);\n  } else if (isTransfer) {\n    // If the user is authenticated and is transferring a wallet, call the verifyTransfer API function\n    verifyApiFunction = apiClient.verifyTransfer.bind(apiClient);\n  } else if (client.user && requestedScopes) {\n    // Scopes = step-up auth: user requests permission for a sensitive op (e.g. wallet export).\n    // We grant it only if they prove they own an existing credential (walletsVerify).\n    // Must use walletsVerify: user is already logged in (not signin) and credential exists (not transfer/link).\n    // If the user is authenticated and requested scopes are provided, call the walletsVerify API function\n    verifyApiFunction = apiClient.walletsVerify.bind(apiClient);\n  } else {\n    // If the user is authenticated and is signing in, call the verifyLink API function\n    verifyApiFunction = apiClient.verifyLink.bind(apiClient);\n  }\n\n  try {\n    return await verifyApiFunction({\n      environmentId: core.environmentId,\n      verifyRequest: {\n        // mapping to handle typecasting for address type\n        additionalWalletAddresses: addressesWithTypes?.map((address) => ({\n          address: address.address,\n          publicKey: address.publicKey,\n          type: address.type as WalletAddressType,\n        })),\n        captchaToken: consumeCaptchaToken(client),\n        // eslint-disable-next-line custom-rules/ban-chain-enum\n        chain: chain as ChainEnum,\n        messageToSign,\n        network: networkId,\n        publicWalletAddress: walletAddress,\n        requestedScopes,\n        signedMessage: signature,\n        walletName,\n        walletProvider: walletProviderType,\n      },\n    });\n  } catch (error) {\n    core.logger.error('Failed to verify message signature ownership', error);\n\n    if (isErrorWithCode(error, 'merge_accounts_confirmation')) {\n      // The credential belongs to another user and the backend is offering to\n      // merge the two accounts. Surface the field-level conflicts (carried on\n      // the API error payload) so the caller can resolve them and complete the\n      // merge via `mergeUserAccounts`.\n      const mergeConflicts =\n        error instanceof APIError\n          ? (error.payload?.mergeConflicts as MergeConflicts | undefined)\n          : undefined;\n\n      throw new MergeAccountsConfirmationError({\n        cause: error,\n        mergeConflicts,\n        walletAddress,\n      });\n    }\n\n    if (isErrorWithCode(error, 'reassign_wallet_confirm')) {\n      throw new WalletAlreadyLinkedToAnotherUserError({\n        cause: error,\n      });\n    }\n\n    if (isErrorWithCode(error, 'chainalysis_blocked_wallet')) {\n      throw new WalletScreeningBlockedError({\n        cause: error,\n      });\n    }\n\n    throw error;\n  }\n};\n","import type { Chain } from '../../../chain';\nimport { CHAINS_INFO_MAP } from '../../constants';\n\n/**\n * Maps the chain name from the API to the SDK chain name\n  * @notInstrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const getSdkChainFromApiChainName = (\n  chainName: string\n): Chain | null => {\n  const chains = Object.keys(CHAINS_INFO_MAP) as Chain[];\n\n  const chain = chains.find(\n    (chain) => CHAINS_INFO_MAP[chain].apiChainName === chainName\n  );\n\n  return chain || null;\n};\n","import * as z from 'zod/mini';\n\nimport type { Chain } from '../../../chain';\nimport { CHAINS_INFO_MAP } from '../../constants';\nimport type { NetworkData } from '../networkProvider/networkProvider.types';\n\n/**\n * Runtime shape of {@link NetworkData}. Identical to the declared type except\n * `iconUrl`, which the type declares as required but is legitimately\n * `undefined` at runtime for networks without configured icons.\n */\ntype NetworkDataRuntime = Omit<NetworkData, 'iconUrl'> & {\n  iconUrl?: string;\n};\n\n/**\n * Runtime schema mirroring the {@link NetworkData} type, used to validate the\n * output of the `transformers.networksData` callback before it is handed to the\n * rest of the SDK.\n *\n * The explicit `z.ZodMiniType<NetworkDataRuntime>` annotation pins the schema\n * to the type at compile time: a field added to or changed on `NetworkData`\n * without a matching schema update fails compilation, so the two cannot\n * silently drift apart. Unknown extra properties are accepted and preserved.\n */\nexport const networkDataSchema: z.ZodMiniType<NetworkDataRuntime> = z.object({\n  blockExplorerUrls: z.array(z.string()),\n  // Derived from the canonical runtime chain map so newly supported chains are\n  // accepted without having to update this schema.\n  chain: z.custom<Chain>(\n    (value) => typeof value === 'string' && value in CHAINS_INFO_MAP\n  ),\n  cluster: z.optional(z.string()),\n  displayName: z.string(),\n  genesisHash: z.optional(z.string()),\n  iconUrl: z.optional(z.string()),\n  name: z.string(),\n  nativeCurrency: z.object({\n    decimals: z.number(),\n    denom: z.optional(z.string()),\n    iconUrl: z.optional(z.string()),\n    name: z.string(),\n    symbol: z.string(),\n  }),\n  networkId: z.string(),\n  rpcUrls: z.object({\n    http: z.array(z.string()),\n  }),\n  testnet: z.boolean(),\n});\n","import * as z from 'zod/mini';\n\nimport { getCore } from '../../../../client/core/getCore';\nimport { getDefaultClient } from '../../../../client/defaultClient';\nimport { assertDefined } from '../../../../utils/assertDefined';\nimport { getSdkChainFromApiChainName } from '../getSdkChainFromApiChainName';\nimport { networkDataSchema } from '../networkDataSchema';\nimport type { NetworkData } from '../networkProvider/networkProvider.types';\n\n/**\n * Retrieves all available network configurations from project settings.\n *\n * This function returns detailed configuration data for all networks enabled\n * in your Dynamic project, including RPC URLs, native currencies, and metadata.\n *\n * If a `transformers.networkData` callback was provided in the client configuration,\n * it will be applied to each network before returning the data. This allows you to\n * customize network properties (such as RPC URLs) in a centralized way.\n *\n * If a `transformers.networksData` callback was provided, it then receives the full\n * flattened list and its (validated) return value is what the SDK uses, allowing\n * networks to be rewritten, filtered, reordered, or added.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns An array of network configuration data for all enabled networks.\n * @notInstrumented\n */\nexport const getNetworksData = (client = getDefaultClient()): NetworkData[] => {\n  const core = getCore(client);\n  const { state, transformers } = core;\n\n  const networkDataTransformer =\n    transformers?.networkData ?? ((networkData) => networkData);\n\n  const { projectSettings } = state.get();\n\n  assertDefined(projectSettings, 'projectSettings not found');\n\n  // Fall back to an empty list (rather than returning early) so the\n  // transformers.networksData callback still runs and can bootstrap a fully\n  // custom network list even when the project has no configured networks.\n  const networks = projectSettings.networks ?? [];\n\n  const networksData = networks\n    .map((network) => {\n      if (!network.chainName) return [];\n\n      const chain = getSdkChainFromApiChainName(network.chainName);\n\n      if (!network?.networks?.length || !chain) return [];\n\n      return network.networks.map((networkConfiguration) => {\n        const networkData: NetworkData = {\n          blockExplorerUrls: networkConfiguration.blockExplorerUrls,\n          chain,\n          cluster: networkConfiguration.cluster,\n          displayName:\n            networkConfiguration.vanityName || networkConfiguration.name,\n          genesisHash: networkConfiguration.genesisHash,\n          iconUrl: networkConfiguration.iconUrls[0],\n          name: networkConfiguration.name,\n          nativeCurrency: {\n            decimals: networkConfiguration.nativeCurrency.decimals,\n            iconUrl: networkConfiguration.nativeCurrency.iconUrl,\n            name: networkConfiguration.nativeCurrency.name,\n            symbol: networkConfiguration.nativeCurrency.symbol,\n          },\n          networkId: networkConfiguration.networkId,\n          rpcUrls: {\n            http: [\n              ...(networkConfiguration.privateCustomerRpcUrls ?? []),\n              ...(networkConfiguration.rpcUrls ?? []),\n            ],\n          },\n          testnet: networkConfiguration.isTestnet ?? false,\n        };\n\n        return networkDataTransformer(networkData);\n      });\n    })\n    .flat();\n\n  if (!transformers?.networksData) {\n    return networksData;\n  }\n\n  let transformedNetworksData: NetworkData[];\n  try {\n    transformedNetworksData = transformers.networksData(networksData);\n  } catch (cause) {\n    // A throwing callback leaves no transformed output to use, so fall back\n    // to the untransformed list rather than letting the exception block\n    // whichever SDK operation happened to read networks first.\n    core.logger.error(\n      'The transformers.networksData callback threw an error. Falling back to the untransformed network list.',\n      cause\n    );\n    return networksData;\n  }\n\n  // Only transformer output is validated: untransformed project-settings data\n  // must keep working exactly as before, so absent a transformer this is a\n  // no-op. Validation is advisory: failures are logged but the transformer's\n  // own objects are still used, so a too-strict schema (e.g. after an API\n  // shape change on an older SDK version) can never silently disable a\n  // customer's transformer, and extra properties are preserved.\n  const validation = z.safeParse(\n    z.array(networkDataSchema),\n    transformedNetworksData\n  );\n\n  if (!validation.success) {\n    core.logger.error(\n      'The transformers.networksData callback returned an invalid network list. The transformed list will still be used, but network operations relying on the invalid fields may misbehave.',\n      z.prettifyError(validation.error)\n    );\n  }\n\n  return transformedNetworksData;\n};\n","import type { Chain } from '../../../../chain';\nimport type {\n  NetworkProviderBuilder,\n  NetworkProviderBuilderRegistry,\n} from '../networkProviderBuilderRegistry.types';\n\n/** @notInstrumented */\nexport const createNetworkProviderBuilderRegistry =\n  (): NetworkProviderBuilderRegistry => {\n    const registry = new Map<Chain, NetworkProviderBuilder>();\n\n    return {\n      get: () => registry,\n      register: (networkProviderBuilder) => {\n        registry.set(networkProviderBuilder.chain, networkProviderBuilder);\n      },\n    };\n  };\n","import { createRuntimeServiceAccessKey } from '../../../../../services/runtimeServices';\nimport { createNetworkProviderBuilderRegistry } from '../createNetworkProviderBuilderRegistry';\n\nexport const getNetworkProviderBuilderRegistry = createRuntimeServiceAccessKey(\n  'networkProviderBuilderRegistry',\n  createNetworkProviderBuilderRegistry\n);\n","import type { DynamicClient } from '../../../../client/types';\nimport { getNetworksData } from '../getNetworksData';\nimport type { NetworkProvider } from '../networkProvider';\nimport { getNetworkProviderBuilderRegistry } from '../networkProviderBuilderRegistry';\n\n/**\n * Retrieves all registered network providers for enabled chains.\n  * @notInstrumented\n */\nexport const getNetworkProviders = (\n  client: DynamicClient\n): NetworkProvider[] => {\n  const networkProviderBuilderRegistry =\n    getNetworkProviderBuilderRegistry(client);\n\n  const registeredNetworkProviderBuilders = Array.from(\n    networkProviderBuilderRegistry.get().values()\n  );\n\n  const networksData = getNetworksData(client);\n\n  const networkProviders = registeredNetworkProviderBuilders.map(\n    ({ builder, chain }) => {\n      const networksDataForChain = networksData.filter(\n        (networkData) => networkData.chain === chain\n      );\n\n      return networksDataForChain.map(builder);\n    }\n  );\n\n  return networkProviders.flat();\n};\n","import type { DynamicClient } from '../../../../client/types';\nimport { NoNetworkProvidersError } from '../../../../errors/NoNetworkProvidersError';\nimport { assertDefined } from '../../../../utils/assertDefined';\nimport type { Chain } from '../../../chain';\nimport { getNetworkProviders } from '../getNetworkProviders';\nimport type { NetworkProvider } from '../networkProvider/networkProvider.types';\n\ntype GetNetworkProviderFromNetworkIdProps = {\n  chain: Chain;\n  networkId: string;\n};\n\n/** @notInstrumented */\nexport const getNetworkProviderFromNetworkId = (\n  { networkId, chain }: GetNetworkProviderFromNetworkIdProps,\n  client: DynamicClient\n): NetworkProvider => {\n  const networkProviders = getNetworkProviders(client);\n\n  if (networkProviders.length === 0) {\n    throw new NoNetworkProvidersError();\n  }\n\n  const networkProvider = networkProviders.find(\n    (networkProvider) =>\n      networkProvider.networkId === networkId && networkProvider.chain === chain\n  );\n\n  assertDefined(\n    networkProvider,\n    `No network provider found for chain ${chain} with network id ${networkId}`\n  );\n\n  return networkProvider;\n};\n"],"mappings":";;;;;;;AAEA,IAAa,+BAAb,cAAkD,UAAU;CAE1D,YAAY,oBAA4B;AACtC,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,4DAA4D;GAC3E,CAAC;;;;;;;;;;ACNN,MAAa,8BAA8B,OAAO,WAAW;;;;;;;;ACI7D,MAAa,kCAAkD;AAC7D,KAAI,uBAAuB,CACzB,QAAO;EACL,UAAU,SACR,QAAQ,OACN,IAAI,6BAA6B,4BAA4B,CAC9D;EACH,aAAa,SACX,QAAQ,OACN,IAAI,6BAA6B,4BAA4B,CAC9D;EACH,UAAU,MAAM,WACd,QAAQ,OACN,IAAI,6BAA6B,4BAA4B,CAC9D;EACJ;AAGH,QAAO;EACL,SAAS,OAAO,QAAQ,aAAa,QAAQ,IAAI;EACjD,YAAY,OAAO,QAAQ,aAAa,WAAW,IAAI;EACvD,SAAS,OAAO,KAAK,UAAU,aAAa,QAAQ,KAAK,MAAM;EAChE;;;;;ACxBH,IAAa,oBAAb,cAAuC,UAAU;CAC/C,YAAY,EAAE,KAAK,SAAkC;AACnD,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,cAAc,CAAC,QAAQ,OAAO,MAAM;GACpC,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;;;;;;ACTN,MAAa,wBAAwB,UAA2B;CAC9D,MAAM,OAAO,IAAI,KAAK,MAAM;AAE5B,QAAO,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,KAAK,aAAa,KAAK;;;;;ACN1D,MAAM,cAAc;;AAGpB,MAAa,oBAAoB,UAAmB;CAClD,MAAMA,OAAoC,EAAE,OAAO;AAEnD,QAAO,KAAK,UAAU,OAAO,GAAG,UAAU;AAGxC,MAAI,qBAAqB,MAAM,CAC7B,QAAO,GAAG,cAAc;AAG1B,SAAO;GACP;;;AAKJ,MAAa,oBAAuB,UAA2C;AAC7E,KAAI;AASF,SARe,KAAK,MAAM,QAAQ,GAAG,UAAU;AAC7C,OAAI,OAAO,UAAU,YAAY,MAAM,WAAW,YAAY,CAC5D,QAAO,IAAI,KAAK,MAAM,MAAM,EAAmB,CAAC;AAGlD,UAAO;IACP;UAIK,OAAO;AACd,SAAO;;;;;;;;;;;;ACpBX,MAAa,iBAAiB,EAC5B,SAAS,IACT,qBACqC;CACrC,MAAM,kBAAkB,QAAiB,SAAS,GAAG,OAAO,GAAG,QAAQ;CAEvE,MAAM,qBAAqB,iBAAsD,EAC/E,aAAa,eAAe,WAC7B;AAED,QAAO;EACL,SAAS,OAAO,qBAAqB;GACnC,MAAM,cAAc,eAAe,iBAAiB,IAAI;GACxD,MAAM,UAAU,kBAAkB,iBAAiB,QAAQ,YAAY;GAEvE,MAAM,UAAU,MAAM,eAAe,QAAQ,aAAa,QAAQ;GAElE,MAAM,aAAa,UAAU,iBAAiB,QAAQ,GAAG;;;;;AAMzD,OAAI,eAAe,MAAM;IACvB,MAAM,SAAS,iBAAiB,OAAO,UAAU,WAAW,MAAM;AAElE,QAAI,OAAO,QACT,QAAO,OAAO;;;;;;AASlB,SAAM,eAAe,WAAW,aAAa,QAAQ;AAErD,UAAO;;EAGT,YAAY,OAAO,qBAAqB;AACtC,SAAM,eAAe,WACnB,eAAe,iBAAiB,IAAI,EACpC,kBAAkB,iBAAiB,QAAQ,YAAY,CACxD;;EAGH,SAAS,OAAO,kBAAkB,UAAU;GAC1C,MAAM,SAAS,iBAAiB,OAAO,UAAU,MAAM;AAEvD,OAAI,CAAC,OAAO,QACV,OAAM,IAAI,kBAAkB;IAC1B,KAAK,iBAAiB;IACtB,OAAO,KAAK,UAAU,MAAM;IAC7B,CAAC;GAGJ,MAAM,OAAO,iBAAiB,OAAO,KAAK;AAE1C,SAAM,eAAe,QACnB,eAAe,iBAAiB,IAAI,EACpC,MACA,kBAAkB,iBAAiB,QAAQ,YAAY,CACxD;;EAEJ;;;;;;;;;;;AC3EH,MAAa,kBAAqB,MAAS,SAAY;AACrD,KAAI,OAAO,GAAG,MAAM,KAAK,CAAE,QAAO;AAElC,KACE,OAAO,SAAS,YAChB,SAAS,QACT,OAAO,SAAS,YAChB,SAAS,KAET,QAAO,SAAS;AAGlB,KAAI,gBAAgB,OAAO,gBAAgB,KAAK;AAC9C,MAAI,KAAK,SAAS,KAAK,KAAM,QAAO;AAEpC,OAAK,MAAM,CAAC,KAAK,UAAU,KACzB,KAAI,CAAC,OAAO,GAAG,OAAO,KAAK,IAAI,IAAI,CAAC,CAAE,QAAO;AAG/C,SAAO;;AAGT,KAAI,gBAAgB,OAAO,gBAAgB,KAAK;AAC9C,MAAI,KAAK,SAAS,KAAK,KAAM,QAAO;AAEpC,OAAK,MAAM,SAAS,KAClB,KAAI,CAAC,KAAK,IAAI,MAAM,CAAE,QAAO;AAE/B,SAAO;;CAGT,MAAM,QAAQ,OAAO,KAAK,KAAK;AAE/B,KAAI,MAAM,WAAW,OAAO,KAAK,KAAK,CAAC,OAAQ,QAAO;AAEtD,MAAK,MAAM,QAAQ,MACjB,KACE,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,KAAe,IAC3D,CAAC,OAAO,GAAG,KAAK,OAAkB,KAAK,MAAiB,CAExD,QAAO;AAIX,KAAI,KAAK,gBAAgB,KAAK,YAAa,QAAO;AAElD,QAAO;;;;;;;;;;;;;;;ACxCT,MAAa,yBAGT,YACA,cAGD,aAAqC;CACpC,IAAI,YAAY,SAAS,WAAW,KAAK,CAAC;AAE1C,QAAO,WAAW,WAAW,UAAU;EACrC,MAAM,YAAY,SAAS,MAAM;AAEjC,MAAI,eAAe,WAAW,UAAU,CAAE;AAE1C,cAAY;AAEZ,WAAS,UAAU;GACnB;;;;;;AC3BN,MAAa,kBACX,OAAO,WAAW,cAAc,SAASC;;;;ACL3C,MAAa,6CACX;AAEF,MAAa,sCAAsC;AAEnD,MAAa,qCAAqC;AAElD,MAAa,oCAAoC;AAEjD,MAAa,kDACX;;;;;ACPF,MAAa,8BAAqD;CAChE,IAAIC;CACJ,IAAIC;AAOJ,QAAO;EACL,SANc,IAAI,SAAY,UAAU,YAAY;AACpD,aAAU;AACV,YAAS;IACT;EAIA,SAAS,WAAqB,SAAS,OAAO;EAC9C,UAAU,UAAa,UAAU,MAAM;EACxC;;;;;ACdH,IAAa,mBAAb,cAAsC,UAAU;CAC9C,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;;;ACLN,MAAa,iCAAiC,EAAE,OAAO;CACrD,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;CAC7B,OAAO,EAAE,QAAQ;CAClB,CAAC;;;;;;;;;;;;;;;;;ACeF,MAAa,2BAA2B,EACtC,kBACsD;AAGtD,KAAI,uBAAuB,IAAI,OAAO,qBAAqB,YACzD,QAAO;EACL,WAAW;EACX,UAAU;EACV,YAAY;EACb;CAIH,MAAM,UAAU,IAAI,iBAAiB,YAAY;CACjD,MAAM,eAAe,IAAIC,gBAAc;CAGvC,MAAM,iBAAiB,iBAA+B;EACpD,MAAM,SAAS,+BAA+B,UAAU,aAAa,KAAK;AAE1E,MAAI,CAAC,OAAO,QAEV;EAGF,MAAM,EAAE,MAAM,UAAU,OAAO;AAC/B,eAAa,KAAK,OAAO,KAAK;;AAGhC,SAAQ,iBAAiB,WAAW,cAAc;AAElD,QAAO;EACL,MAAM,OAAO,aAAa;AACxB,gBAAa,IAAI,OAAO,SAAS;;EAGnC,KAAK,OAAO,aAAa;AACvB,gBAAa,GAAG,OAAO,SAAS;;EAGlC,OAAO,EAAE,MAAM,YAAY;AACzB,WAAQ,YAAY;IAAE;IAAM;IAAO,CAAC;;EAEvC;;;;;;;;ACpDH,MAAMC,aAAuC;CAC3C,OAAO;CACP,OAAO;CACP,MAAM;CACN,MAAM;CACP;AAGD,MAAM,iBAAiB;;;;;;AAOvB,MAAa,gBAAgB,UAA+B,EAAE,KAAa;CACzE,MAAMC,eAAmC,IAAI,cAAc;CAG3D,MAAMC,WAAqB,QAAQ,SAAS;CAI5C,MAAM,aAAa,UAA6B;AAC9C,SAAO,WAAW,UAAU,WAAW;;CAKzC,MAAM,iBAAiB,OAAiB,YAA4B;AAGlE,SAAO,qBAFW,IAAI,MAAM,EAAC,aAAa,CAErB,IAAI,MAAM,aAAa,CAAC,IAAI;;CAKnD,MAAM,OACJ,OACA,eACA,SACA,GAAG,SACA;AACH,eAAa,KAAK,OAAO,OAAO,SAAS,GAAG,KAAK;AAEjD,MAAI,CAAC,UAAU,MAAM,CAAE;AAEvB,gBAAc,cAAc,OAAO,QAAQ,EAAE,GAAG,KAAK;;AAGvD,QAAO;EACL,QAAQ,SAAS,GAAG,SAClB,IAAI,SAAS,eAAe,OAAO,SAAS,GAAG,KAAK;EAEtD,QAAQ,SAAS,GAAG,SAClB,IAAI,SAAS,eAAe,OAAO,SAAS,GAAG,KAAK;EAEtD,OAAO,SAAS,GAAG,SACjB,IAAI,QAAQ,eAAe,MAAM,SAAS,GAAG,KAAK;EAEpD,KAAK,aAAa,IAAI,KAAK,aAAa;EAExC,IAAI,aAAa,GAAG,KAAK,aAAa;EACtC,OAAO,SAAS,GAAG,SACjB,IAAI,QAAQ,eAAe,MAAM,SAAS,GAAG,KAAK;EACrD;;;;;;;;;;;;ACnEH,IAAa,2BAAb,cAA8C,UAAU;CACtD,YAAY,EAAE,UAA0C;AACtD,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,wDAAwD,OAAO;GAC9E,CAAC;;;;;;;;;;;ACdN,MAAM,6BAA6B,IAAI,IAAI,CAAC,SAAS,SAAS,CAAC;;;;;;;;;;;AAa/D,MAAa,2BAA2B,QAA4B;CAClE,IAAIC;AAEJ,KAAI;AACF,WAAS,eAAe,MAAM,MAAM,IAAI,IAAI,IAAI;SAC1C;AAEN,QAAM,IAAI,yBAAyB,EAAE,QAAQ,WAAW,CAAC;;AAG3D,KAAI,CAAC,2BAA2B,IAAI,OAAO,SAAS,CAClD,OAAM,IAAI,yBAAyB,EAAE,QAAQ,OAAO,UAAU,CAAC;;;;;;;;;AC3BnE,MAAa,eAAe,WAC1B,CAAC,GAAI,kBAAkB,aAAa,SAAS,IAAI,WAAW,OAAO,CAAE,CAClE,KAAK,MAAM,EAAE,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAC3C,KAAK,GAAG;;;;;;;;ACHb,MAAa,wBAAwB,iBAA8B;CACjE,MAAM,oBAAoB,IAAI,WAAW,aAAa;CACtD,MAAM,MAAM,kBAAkB;CAG9B,MAAM,kBAAkB,kBAAkB,MAAM,GAAI,IAAI,QAAS,EAAE;AAGnE,iBAAgB,KAAK,IAAO,kBAAkB,MAAM,KAAK;AACzD,QAAO,gBAAgB;;;;;ACXzB,IAAa,mBAAb,cAAsC,UAAU;CAE9C,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,QAAQ,QAAQ;GAC/B,CAAC;;;;;;ACXN,MAAa,aAAa;;;;;ACW1B,MAAa,uBAAuB,EAClC,IACA,cAEA,IAAI,SAAS,SAAS,WAAW;CAG/B,MAAM,UAFc,GAAG,YAAY,YAAY,YAAY,CACjC,YAAY,WAAW,CAC3B,OAAO,QAAQ;AAErC,SAAQ,kBAAkB,SAAS;AACnC,SAAQ,gBAAgB,OAAO,QAAQ,MAAe;EACtD;;;;;ACVJ,MAAa,oBAAoB,EAC/B,IACA,cAEA,IAAI,SAAS,SAAS,WAAW;CAG/B,MAAM,UAFc,GAAG,YAAY,YAAY,WAAW,CAChC,YAAY,WAAW,CAC3B,IAAI,QAAQ;AAElC,SAAQ,kBAAkB,QAAQ,QAAQ,OAAgC;AAC1E,SAAQ,gBAAgB,OAAO,QAAQ,MAAe;EACtD;;;;;ACXJ,MAAa,oBAAoB,EAC/B,IACA,YAEA,IAAI,SAAS,SAAS,WAAW;CAG/B,MAAM,UAFc,GAAG,YAAY,YAAY,YAAY,CACjC,YAAY,WAAW,CAC3B,IAAI,MAAM;AAEhC,SAAQ,kBAAkB,SAAS;AACnC,SAAQ,gBAAgB,OAAO,QAAQ,MAAe;EACtD;;;;ACrBJ,MAAM,wBAAwB,OAA0B;AACtD,KAAI,CAAC,GAAG,iBAAiB,SAAS,WAAW,CAC3C,IAAG,kBAAkB,YAAY,EAAE,SAAS,WAAW,CAAC;;;AAM5D,MAAM,kBACJ,QACA,YAEA,IAAI,SAAS,SAAS,WAAW;CAC/B,MAAM,0BAA0B,YAAY;CAE5C,IAAIC;AACJ,KAAI,wBACF,WAAU,UAAU,KAAK,OAAO;KAEhC,WAAU,UAAU,KAAK,QAAQ,QAAQ;AAG3C,SAAQ,wBAAwB,qBAAqB,QAAQ,OAAO;AAEpE,SAAQ,kBAAkB,QAAQ,QAAQ,OAAO;AACjD,SAAQ,gBAAgB,OAAO,QAAQ,MAAe;EACtD;;;;;;;;;;AAYJ,MAAa,eAAe,OAAO,WAAyC;CAC1E,MAAM,KAAK,MAAM,eAAe,OAAO;AAEvC,KAAI,GAAG,iBAAiB,SAAS,WAAW,CAC1C,QAAO;CAOT,MAAM,cAAc,GAAG,UAAU;AACjC,IAAG,OAAO;AAEV,QAAO,eAAe,QAAQ,YAAY;;;;;AC5C5C,MAAM,wBAAwB,IAAI,IAAI;CACpC;CACA;CACA;CACA;CACD,CAAC;AAEF,MAAM,oBAAoB,UACxB,iBAAiB,gBAAgB,sBAAsB,IAAI,MAAM,KAAK;AAExE,MAAM,gBAAgB,OAAU,EAC9B,QACA,gBACuC;CACvC,MAAM,KAAK,MAAM,aAAa,OAAO;AACrC,KAAI;AAGF,SAFe,MAAM,UAAU,GAAG;WAG1B;AACR,KAAG,OAAO;;;;;;;;;;AAYd,MAAa,eAAe,OAC1B,WACe;AACf,KAAI;AACF,SAAO,MAAM,cAAc,OAAO;UAC3B,OAAO;AACd,MAAI,CAAC,iBAAiB,MAAM,CAC1B,OAAM;AAGR,SAAO,cAAc,OAAO;;;;;;ACxChC,MAAM,kBAAkB;;AAGxB,MAAaC,yBAAgD,WAAW;CACtE,MAAM,SAAS,QAAQ,UAAU;CAKjC,MAAM,6BAAa,IAAI,KAAwB;CAG/C,MAAM,cAAc,OAAO,YAAqC;EAC9D,MAAM,UAAU,MAAM,OAAO,OAAO,YAClC;GAAE,MAAM;GAAS,YAAY;GAAS,EACtC,OACA,CAAC,OAAO,CACT;EAQD,MAAM,eAAe,YADO,qBALP,MAAM,OAAO,OAAO,UACvC,OACA,QAAQ,UACT,CAE6D,CACT;EAErD,MAAMC,QAAmB;GACvB;GACA,YAAY,QAAQ;GACpB;GACD;AAED,aAAW,IAAI,SAAS,MAAM;AAE9B,QAAM,aAAa;GACjB;GACA,YAAY,OAAO,iBAAiB;IAAE;IAAI;IAAO,CAAC;GACnD,CAAC;AAEF,SAAO;;CAIT,MAAM,YAAY,OAChB,SACA,QACoB;EACpB,MAAM,aAAa,MAAM,OAAO,OAAO,UACrC,OACA,KACA;GAAE,MAAM;GAAS,YAAY;GAAS,EACtC,OACA,CAAC,OAAO,CACT;EAED,MAAM,YAAY;GAAE,KAAK,IAAI;GAAK,KAAK,IAAI;GAAK,GAAG,IAAI;GAAG,GAAG,IAAI;GAAG;EAEpE,MAAM,kBAAkB,MAAM,OAAO,OAAO,UAC1C,OACA,WACA;GAAE,MAAM;GAAS,YAAY;GAAS,EACtC,MACA,CAAC,SAAS,CACX;EAID,MAAM,eAAe,YADO,qBADP,MAAM,OAAO,OAAO,UAAU,OAAO,gBAAgB,CACZ,CACT;EAErD,MAAMA,QAAmB;GAAE;GAAS;GAAY;GAAc;AAE9D,aAAW,IAAI,SAAS,MAAM;AAE9B,QAAM,aAAa;GACjB;GACA,YAAY,OAAO,iBAAiB;IAAE;IAAI;IAAO,CAAC;GACnD,CAAC;AAEF,SAAO;;CAIT,MAAM,eAAe,OAAO,YAA4C;EACtE,MAAM,SAAS,WAAW,IAAI,QAAQ;AACtC,MAAI,OACF,QAAO,OAAO;AAQhB,UALc,MAAM,aAAa;GAC/B;GACA,YAAY,OAAO,iBAAiB;IAAE;IAAI;IAAS,CAAC;GACrD,CAAC,GAEY,gBAAgB;;CAIhC,MAAM,OAAO,OAAO,SAAiB,YAAqC;EAGxE,MAAM,QACJ,WAAW,IAAI,QAAQ,IACtB,MAAM,aAAa;GAClB;GACA,YAAY,OAAO,iBAAiB;IAAE;IAAI;IAAS,CAAC;GACrD,CAAC;AAEJ,MAAI,CAAC,MACH,OAAM,IAAI,iBAAiB,QAAQ;EAIrC,MAAM,OADU,IAAI,aAAa,CACZ,OAAO,QAAQ;AAQpC,SAAO,YANW,MAAM,OAAO,OAAO,KACpC;GAAE,MAAM,EAAE,MAAM,WAAW;GAAE,MAAM;GAAS,EAC5C,MAAM,YACN,KACD,CAE4B;;CAI/B,MAAM,SAAS,OAAO,YAAsC;AAC1D,MAAI,WAAW,IAAI,QAAQ,CACzB,QAAO;AAQT,SALc,MAAM,aAAa;GAC/B;GACA,YAAY,OAAO,iBAAiB;IAAE;IAAI;IAAS,CAAC;GACrD,CAAC,KAEe;;CAInB,MAAM,YAAY,OAAO,YAAmC;AAC1D,aAAW,OAAO,QAAQ;AAE1B,QAAM,aAAa;GACjB;GACA,YAAY,OAAO,oBAAoB;IAAE;IAAI;IAAS,CAAC;GACxD,CAAC;;AAGJ,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACD;;;;;ACjKH,IAAa,8BAAb,cAAiD,UAAU;CACzD,YAAY,EAAE,WAAyC;AACrD,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,cAAc,CAAC,YAAY,UAAU;GACrC,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACdN,IAAa,4BAAb,cAA+C,UAAU;CACvD,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACKN,MAAMC,+BAAwE;CAC5E,QAAQ;CACR,SAAS;CACT,WAAW;CACX,YAAY;CACZ,cAAc;CACd,QAAQ;CACR,aAAa;CACb,WAAW;CACZ;AAED,MAAM,gBAAgB,cACpB,6BAA6B,cAAc;;;;;;;;;;AAY7C,MAAa,8BAA+C;AAC1D,KAAI,uBAAuB,CACzB,QAAO;EACL,eAAe,QAAQ,SAAS;EAChC,kBAAkB;EAClB,0BAA0B;EAC1B,WAAW;EACX,UAAU;EACV,eAAe,QAAQ,SAAS;EAChC,iBAAiB,QAAQ,SAAS;EAClC,mBAAmB;EACpB;CAGH,MAAM,eAAe,IAAIC,gBAAgC;CACzD,MAAM,2BAAW,IAAI,KAA8B;CAEnD,MAAM,6BAAa,IAAI,SAA4E;CAEnG,IAAIC;CACJ,IAAIC,kBAA2C;CAC/C,IAAI,eAAe;CAEnB,MAAM,sBAAsB,UAAmC;AAC7D,oBAAkB;AAClB,eAAa,KAAK,yBAAyB,MAAM;;CAInD,MAAM,sBAAsB,gBAAyC;EACnE,MAAM,WAAW,SAAS,IAAI,YAAY;AAE1C,MAAI,SACF,QAAO;AAGT,MAAI,CAAC,WACH,OAAM,IAAI,2BAA2B;EAGvC,MAAM,UAAU,WAAW,SAAS,IAAI,YAAY;AACpD,WAAS,IAAI,aAAa,QAAQ;AAElC,SAAO;;CAGT,MAAMC,UAAsC,OAAO,EAAE,QAAQ,cAAc;AACzE,MAAI,aACF;AAGF,iBAAe;AAEf,MAAI;GACF,MAAM,OAAO,QAAQ,OAAO;AAE5B,OAAI,YAAY;AACd,eAAW,OAAO;AAClB,aAAS,OAAO;;GAKlB,MAAM,EACJ,cAAc,kBACd,cACA,uBACE,MAAM,OAAO;AAEjB,gBAAa,IAAI,iBAAiB;IAIhC,eAAe,cAAc,aAAa;AAGxC,KAFkB,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAGnD,qBAAqB,EAAE,eAAe,KAAK,eAAe,CAAC,CAC3D,MAAM,aAAa;AAClB,eAAS,MAAM,SAAS,MAAM;OAC9B,CACD,OAAO,QAAiB;AAEvB,eADgB,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,EAC9C,KAAK;OACvB;;IAEN,aAAa;IACb,SAAS;KAAE;KAAc;KAAoB;IAC9C,CAAC;AAEF,cAAW,WAAW,IAAI,gBAAgB;AACxC,uBAAmB,aAAa,YAAY,QAAQ,CAAC;KACrD;AAEF,cAAW,SAAS;YACZ;AACR,kBAAe;;;CAInB,MAAMC,mBAAkD;AACtD,MAAI,CAAC,WACH;AAGF,OAAK,MAAM,WAAW,SAAS,QAAQ,CACrC,SAAQ,QAAQ,CAAC,YAAY,GAAG;AAGlC,WAAS,OAAO;AAChB,aAAW,OAAO;AAClB,eAAa;;CAGf,MAAMC,YAA0C,OAAU,EACxD,eACA,eAII;EACJ,MAAM,UAAU,mBAAmB,cAAc,QAAQ;EAEzD,MAAMC,WAA4C,YAAY;GAC5D,MAAM,SAAS,cAAc,OAAO,UAAU,QAAQ,KAAK;AAE3D,OAAI,CAAC,OAAO,QACV;AAGF,YAAS,EAAE,MAAM,OAAO,MAAM,CAAC;;AAGjC,aAAW,IAAI,UAAU,QAAQ;AAEjC,QAAM,QAAQ,UAAU,QAAQ;;CAGlC,MAAMC,eAAkD,EACtD,eACA,eAII;EACJ,MAAM,UAAU,SAAS,IAAI,cAAc,QAAQ;AAEnD,MAAI,CAAC,QACH;EAGF,MAAM,UAAU,WAAW,IAAI,SAAS;AAExC,MAAI,SAAS;AACX,WAAQ,YAAY,QAAQ;AAC5B,cAAW,OAAO,SAAS;;;CAI/B,MAAMC,UAAsC,OAAU,EACpD,eACA,WAII;EACJ,MAAM,SAAS,cAAc,OAAO,UAAU,KAAK;AAEnD,MAAI,CAAC,OAAO,QACV,OAAM,IAAI,4BAA4B,EAAE,SAAS,cAAc,SAAS,CAAC;AAI3E,QADgB,mBAAmB,cAAc,QAAQ,CAC3C,QAAQ,WAAW,OAAO,KAAK;;AAG/C,QAAO;EACL;EACA;EACA,0BAA0B;EAC1B,MAAM,OAAO,aAAa;AACxB,gBAAa,IAAI,OAAO,SAAS;;EAEnC,KAAK,OAAO,aAAa;AACvB,gBAAa,GAAG,OAAO,SAAS;;EAElC;EACA;EACA;EACD;;;;;;;;;;;;;;ACxNH,MAAa,4BAA4B,EACvC,oBAEA,WAAW,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC8B3B,IAAa,iCAAb,cAAoD,UAAU;CAC5D;CAEA;CAEA,YAAY,EACV,OACA,gBACA,iBAC2C;AAC3C,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;AAEF,OAAK,iBAAiB;AACtB,OAAK,gBAAgB;;;;;;AChEzB,IAAa,0BAAb,cAA6C,UAAU;CACrD,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,wCAAb,cAA2D,UAAU;CACnE,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACcN,IAAa,8BAAb,cAAiD,UAAU;CACzD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;;AC7BN,MAAa,qBAAqB,SAAS,kBAAkB,KAAK;CAChE,MAAM,kBAAkB,OAAO;AAE/B,eAAc,iBAAiB,qCAAqC;CAEpE,MAAM,EAAE,aAAa;AAGrB,QAAO,SAAS,SAAS,WAAW,SAAS,UAAU,WAAW;;;;;;;;;ACHpE,MAAa,uBACX,WACuB;CACvB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,eAAe,KAAK,MAAM,KAAK,CAAC;AAEtC,KAAI,kBAAkB,OAAO,CAC3B,eAAc,cAAc,4BAA4B;AAG1D,MAAK,MAAM,IAAI,EACb,cAAc,MACf,CAAC;AAEF,QAAO,gBAAgB;;;;;ACtBzB,IAAa,4BAAb,cAA+C,UAAU;CAEvD,YAAY,YAAoB;AAC9B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mCAAmC;GAClD,CAAC;;;;;;;;;;;;;ACMN,MAAK,mBACH,EAAA,gDAEA;AAGD,CAFG,QAAY,OAAA,CAEf,MAAA,IAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACLD,MAAa,gBACX,EAAE,gBACF,SAAS,kBAAkB,KACxB;AAGH,QAFa,QAAQ,OAAO,CAEhB,WAAW,IAAI,aAAa;;;;;;ACA1C,MAAa,cAAc,OACzB,EAAE,eAAe,WAAW,aAAa,QACzC,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,YAAY,gBAAgB,EAAE,EAAE,OAAO;CAE7C,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI;EACF,MAAM,aAAa,6BAA6B;GAC9C,OAAO,eAAe;GACtB,aAAa,eAAe,SAAS;GACtC,CAAC;EAEF,MAAMC,iBAAiC;GACrC,SAAS,cAAc;GACvB;GAEA,OAAO,eAAe;GACtB,UAAU,eAAe;GACzB;GACD;AAED,QAAM,UAAU,YAAY;GAC1B;GACA,eAAe,KAAK;GACrB,CAAC;UACK,OAAO;AACd,OAAK,OAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC;;;;;;;;;;;;AC1CxD,MAAa,+BACX,EAAE,oCACF,WACS;AACT,KAAI,iCAAiC,WAAW,EAC9C;CAGF,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,sCACJ,iCAAiC,KAAK,EAAE,SAAS,GAAG;CAEtD,MAAMC,mCAA8D,KAAK,MACtE,KAAK,CACL,yBAAyB,QACvB,4BACC,CAAC,oCAAoC,SACnC,wBAAwB,GACzB,CACJ;AAEH,MAAK,MAAM,IAAI,EACb,0BAA0B,CACxB,GAAG,kCACH,GAAG,iCACJ,EACF,CAAC;;;;;;ACjCJ,MAAa,kDACX,EAAE,gBACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;AAE5B,MAAK,MAAM,IAAI,EACb,sBAAsB;EACpB,GAAG,KAAK,MAAM,KAAK,CAAC;EACpB,GAAG;EACJ,EACF,CAAC;;;;;;;;;;;;;;;;;ACUJ,MAAa,wCACX,EACE,6BAA6B,MAC7B,gBACA,qBAEF,WACoB;AACpB,KAAI,eAAe,WAAW,EAC5B,QAAO,EAAE;CAGX,MAAM,yBAAyB,kBAAkB,OAAO;CAExD,MAAMC,oBAAqC,EAAE;CAC7C,MAAMC,mCAAoD,EAAE;CAC5D,MAAMC,6CAAqE,EAAE;CAE7E,MAAMC,2BAA4C,eAAe,KAC9D,cAAc;EACb,MAAM,gCAAgC,uBAAuB,MAC1D,0BAA0B,sBAAsB,OAAO,UAAU,GACnE;AAED,MAAI,CAAC,+BAA+B;AAClC,qBAAkB,KAAK,UAAU;AACjC,UAAO;;EAGT,MAAM,6BACJ,8BAA8B,sBAAsB;AAEtD,MAAI,8BAA8B,sBAAsB;AACtD,OAAI,2BACF,4CACE,8BAA8B,wBAC5B;AAGN,UAAO;IACL,GAAG;IACH,sBACE,8BAA8B;IACjC;;AAGH,MAAI,2BACF,kCAAiC,KAAK,UAAU;AAGlD,SAAO;GAEV;CAED,IAAI,wBAAwB;AAE5B,KAAI,OAAO,KAAK,2CAA2C,CAAC,SAAS,GAAG;AACtE,iDACE,EAAE,cAAc,4CAA4C,EAC5D,OACD;AAED,0BAAwB;;AAG1B,KAAI,4BAA4B;EAC9B,MAAM,kBAAkB,CACtB,GAAG,kCACH,GAAG,kBACJ;AAED,MAAI,gBAAgB,SAAS,GAAG;AAC9B,+BACE,EAAE,kCAAkC,iBAAiB,EACrD,OACD;AAED,2BAAwB;AAExB,QAAK,MAAM,oBAAoB,kBAC7B,CAAK,YAAY,EAAE,eAAe,kBAAkB,EAAE,OAAO;;;AAKnE,KAAI,sBACF,gCAA+B,OAAO;AAGxC,QAAO;;;;;;;;;;;;ACrGT,MAAa,kBAAkB,WAAuC;CACpE,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,kBAAkB,OAAO,iBAAiB;AAEhD,QAAO;EACL,YAAY,KAAK,UAAU,WAAW,iBAAiB,WAAW;EAClE,SAAS,KAAK,UAAU,QAAQ,iBAAiB,eAAe;EAChE,eAAe,KAAK,UAAU;EAC9B,kBAAkB,KAAK,UAAU;EAClC;;;;;;;;;ACTH,MAAa,sBAAsB,OAAO,EACxC,QACA,gBACA,SACA,KACA,SACA,OACA,UACA,WACA,WACA,gBAC+B;CAM/B,MAAM,SAAS,CADA,GAAG,OAAO,kCAAkC,eAAe,YAClD,QAAQ,CAAC,KAAK,KAAK;CAI3C,MAAM,yBAAyB,YAAY,SAAS;CACpD,MAAM,sBAAsB,GAAG,CAAC,QAAQ,UAAU,CAAC,KACjD,uBACD,CAAC;CAEF,MAAMC,eAAyB,EAAE;AACjC,cAAa,KAAK,QAAQ,MAAM;AAChC,cAAa,KAAK,aAAa;AAC/B,KAAI,QACF,cAAa,KAAK,aAAa,UAAU;AAG3C,cAAa,KAAK,UAAU,QAAQ;AAEpC,KAAI,SACF,cAAa,KAAK,cAAc,WAAW;AAG7C,KAAI,UACF,cAAa,KAAK,eAAe,YAAY;AAG/C,KAAI,WAAW,OACb,cAAa,KACX,aAAa,UAAU,KAAK,aAAa,SAAS,SAAS,CAAC,MAAM,GACnE;AAKH,QAAO,CAAC,qBAFO,aAAa,KAAK,KAAK,CAEF,CAAC,KAAK,KAAK;;;;;;AChEjD,MAAa,gCAAgC,WAA0B;CACrE,MAAM,EAAE,YAAY,eAAe,OAAO;AAE1C,QAAO,cAAc,QAAQ,6KAA6K,QAAQ;;;;;;;;;ACMpN,MAAa,iCACX,EAAE,2BACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,gBAAgB,KAAK,MAAM,KAAK;CAEtC,MAAM,EAAE,6BAA6B,KAAK,MAAM,KAAK;CAErD,MAAM,mCAAmC,yBAAyB,QAC/D,YAAY,QAAQ,OAAO,wBAAwB,GACrD;AAED,MAAK,MAAM,IAAI,EACb,0BAA0B,kCAC3B,CAAC;;;;;AAMF,yCAAwC,EAAE,eAAe,EAAE,OAAO;;;;;;;;;AC/BpE,MAAa,WAAW,UACtB,iBAAiB;;;;;;;;ACEnB,MAAa,mBACX,OACA,SACiC;AACjC,KAAI,CAAC,QAAQ,MAAM,CAAE,QAAO;AAE5B,QAAO,UAAU,SAAS,MAAM,SAAS;;;;;;;;;;;;;;;ACgC3C,MAAa,kCAAkC,OAC7C,EACE,eACA,eACA,oBACA,WACA,OACA,aAAa,OACb,mBACA,oBACA,WACA,mBAEF,WAC4B;CAC5B,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,YAAY,gBAAgB,EAAE,EAAE,OAAO;CAE7C,MAAM,aAAa,6BAA6B;EAC9C;EACA,aAAa;EACd,CAAC;CAEF,IAAI;AAEJ,KAAI,CAAC,OAAO,KAEV,qBAAoB,UAAU,cAAc,KAAK,UAAU;UAClD,WAET,qBAAoB,UAAU,eAAe,KAAK,UAAU;UACnD,OAAO,QAAQ,gBAKxB,qBAAoB,UAAU,cAAc,KAAK,UAAU;KAG3D,qBAAoB,UAAU,WAAW,KAAK,UAAU;AAG1D,KAAI;AACF,SAAO,MAAM,kBAAkB;GAC7B,eAAe,KAAK;GACpB,eAAe;IAEb,2BAA2B,oBAAoB,KAAK,aAAa;KAC/D,SAAS,QAAQ;KACjB,WAAW,QAAQ;KACnB,MAAM,QAAQ;KACf,EAAE;IACH,cAAc,oBAAoB,OAAO;IAElC;IACP;IACA,SAAS;IACT,qBAAqB;IACrB;IACA,eAAe;IACf;IACA,gBAAgB;IACjB;GACF,CAAC;UACK,OAAO;AACd,OAAK,OAAO,MAAM,gDAAgD,MAAM;AAExE,MAAI,gBAAgB,OAAO,8BAA8B,CAUvD,OAAM,IAAI,+BAA+B;GACvC,OAAO;GACP,gBANA,iBAAiB,WACZ,MAAM,SAAS,iBAChB;GAKJ;GACD,CAAC;AAGJ,MAAI,gBAAgB,OAAO,0BAA0B,CACnD,OAAM,IAAI,sCAAsC,EAC9C,OAAO,OACR,CAAC;AAGJ,MAAI,gBAAgB,OAAO,6BAA6B,CACtD,OAAM,IAAI,4BAA4B,EACpC,OAAO,OACR,CAAC;AAGJ,QAAM;;;;;;;;;;ACrIV,MAAa,+BACX,cACiB;AAOjB,QANe,OAAO,KAAK,gBAAgB,CAEtB,MAClB,UAAU,gBAAgB,OAAO,iBAAiB,UACpD,IAEe;;;;;;;;;;;;;;;ACQlB,MAAaC,oBAAuD,EAAE,OAAO;CAC3E,mBAAmB,EAAE,MAAM,EAAE,QAAQ,CAAC;CAGtC,OAAO,EAAE,QACN,UAAU,OAAO,UAAU,YAAY,SAAS,gBAClD;CACD,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC/B,aAAa,EAAE,QAAQ;CACvB,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC;CACnC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC/B,MAAM,EAAE,QAAQ;CAChB,gBAAgB,EAAE,OAAO;EACvB,UAAU,EAAE,QAAQ;EACpB,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC7B,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC/B,MAAM,EAAE,QAAQ;EAChB,QAAQ,EAAE,QAAQ;EACnB,CAAC;CACF,WAAW,EAAE,QAAQ;CACrB,SAAS,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAC1B,CAAC;CACF,SAAS,EAAE,SAAS;CACrB,CAAC;;;;;;;;;;;;;;;;;;;;;;ACtBF,MAAa,mBAAmB,SAAS,kBAAkB,KAAoB;CAC7E,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,EAAE,OAAO,iBAAiB;CAEhC,MAAM,yBACJ,cAAc,iBAAiB,gBAAgB;CAEjD,MAAM,EAAE,oBAAoB,MAAM,KAAK;AAEvC,eAAc,iBAAiB,4BAA4B;CAO3D,MAAM,gBAFW,gBAAgB,YAAY,EAAE,EAG5C,KAAK,YAAY;AAChB,MAAI,CAAC,QAAQ,UAAW,QAAO,EAAE;EAEjC,MAAM,QAAQ,4BAA4B,QAAQ,UAAU;AAE5D,MAAI,CAAC,SAAS,UAAU,UAAU,CAAC,MAAO,QAAO,EAAE;AAEnD,SAAO,QAAQ,SAAS,KAAK,yBAAyB;AA0BpD,UAAO,uBAzB0B;IAC/B,mBAAmB,qBAAqB;IACxC;IACA,SAAS,qBAAqB;IAC9B,aACE,qBAAqB,cAAc,qBAAqB;IAC1D,aAAa,qBAAqB;IAClC,SAAS,qBAAqB,SAAS;IACvC,MAAM,qBAAqB;IAC3B,gBAAgB;KACd,UAAU,qBAAqB,eAAe;KAC9C,SAAS,qBAAqB,eAAe;KAC7C,MAAM,qBAAqB,eAAe;KAC1C,QAAQ,qBAAqB,eAAe;KAC7C;IACD,WAAW,qBAAqB;IAChC,SAAS,EACP,MAAM,CACJ,GAAI,qBAAqB,0BAA0B,EAAE,EACrD,GAAI,qBAAqB,WAAW,EAAE,CACvC,EACF;IACD,SAAS,qBAAqB,aAAa;IAC5C,CAEyC;IAC1C;GACF,CACD,MAAM;AAET,KAAI,CAAC,cAAc,aACjB,QAAO;CAGT,IAAIC;AACJ,KAAI;AACF,4BAA0B,aAAa,aAAa,aAAa;UAC1D,OAAO;AAId,OAAK,OAAO,MACV,0GACA,MACD;AACD,SAAO;;CAST,MAAM,aAAa,EAAE,UACnB,EAAE,MAAM,kBAAkB,EAC1B,wBACD;AAED,KAAI,CAAC,WAAW,QACd,MAAK,OAAO,MACV,yLACA,EAAE,cAAc,WAAW,MAAM,CAClC;AAGH,QAAO;;;;;;AC/GT,MAAa,6CAC2B;CACpC,MAAM,2BAAW,IAAI,KAAoC;AAEzD,QAAO;EACL,WAAW;EACX,WAAW,2BAA2B;AACpC,YAAS,IAAI,uBAAuB,OAAO,uBAAuB;;EAErE;;;;;ACbL,MAAa,oCAAoC,8BAC/C,kCACA,qCACD;;;;;;;;ACGD,MAAa,uBACX,WACsB;CACtB,MAAM,iCACJ,kCAAkC,OAAO;CAE3C,MAAM,oCAAoC,MAAM,KAC9C,+BAA+B,KAAK,CAAC,QAAQ,CAC9C;CAED,MAAM,eAAe,gBAAgB,OAAO;AAY5C,QAVyB,kCAAkC,KACxD,EAAE,SAAS,YAAY;AAKtB,SAJ6B,aAAa,QACvC,gBAAgB,YAAY,UAAU,MACxC,CAE2B,IAAI,QAAQ;GAE3C,CAEuB,MAAM;;;;;;AClBhC,MAAa,mCACX,EAAE,WAAW,SACb,WACoB;CACpB,MAAM,mBAAmB,oBAAoB,OAAO;AAEpD,KAAI,iBAAiB,WAAW,EAC9B,OAAM,IAAI,yBAAyB;CAGrC,MAAM,kBAAkB,iBAAiB,MACtC,sBACCC,kBAAgB,cAAc,aAAaA,kBAAgB,UAAU,MACxE;AAED,eACE,iBACA,uCAAuC,MAAM,mBAAmB,YACjE;AAED,QAAO"}

package/dist/migrateFromFireblocks-7aKNa_3P.native.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrateFromFireblocks-7aKNa_3P.native.esm.js","names":["REASON_BY_NATIVE_CODE: Record<string, WebViewLoadFailureReason>","reason: WebViewLoadFailureReason","NativeDynamicWebView","messageHandlers: Array<(data: unknown) => void>","errorHandlers: Array<(error: unknown) => void>","subscription: { remove: () => void } | null","createWaasClient: CreateWaasClient","refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/errors/CorruptedKeyShareError.ts","../src/turboModules/NativeDynamicWebView.ts","../src/errors/WebViewLoadFailedError.ts","../src/modules/waas/createWaasClient/translateNativeOpenError.ts","../src/modules/waas/createWaasClient/createNativeWaasSDKContainer.native.ts","../src/modules/waas/createWaasClient/createWaasSDKContainer.native.ts","../src/modules/waas/createWaasClient/createWaasClient.native.ts","../src/modules/waas/getWaasChainNameFromChain/getWaasChainNameFromChain.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import { BaseError } from './base';\n\ntype CorruptedKeyShareErrorParams = {\n  cause?: Error | null;\n};\n\n/**\n * Thrown when a persisted client key share cannot be parsed back into its\n * structured form (e.g. a partially-written or corrupted keychain entry).\n *\n * Surfaced as a typed error rather than swallowed so callers can distinguish\n * \"no key share stored\" (empty result) from \"key share exists but is\n * unreadable\" — the latter must never be silently treated as the former,\n * which could trigger an unintended re-keygen that overwrites recoverable\n * material.\n */\nexport class CorruptedKeyShareError extends BaseError {\n  constructor({ cause = null }: CorruptedKeyShareErrorParams = {}) {\n    super({\n      cause,\n      code: 'corrupted_key_share_error',\n      details:\n        'The stored client key share could not be parsed. The secure storage entry may be partially written or corrupted.',\n      docsUrl: null,\n      name: 'CorruptedKeyShareError',\n      shortMessage: 'Stored client key share is corrupted and cannot be read.',\n    });\n  }\n}\n","// This file is a TurboModule spec consumed by React Native codegen.\n// The `interface`, `default export`, and the `react-native` import are hard\n// requirements of the codegen parser and intentionally deviate from the\n// project's conventions. Codegen discovers specs by the `Native*` filename\n// prefix, so this file cannot be renamed to `.native.ts`.\n\nimport { type TurboModule, TurboModuleRegistry } from 'react-native';\nimport type { UnsafeObject } from 'react-native/Libraries/Types/CodegenTypes';\n\nexport interface Spec extends TurboModule {\n  addListener(eventName: string): void;\n  close(instanceId: string): void;\n  /**\n   * Creates a WKWebView for the given instanceId and begins loading `url`.\n   *\n   * Resolves on `didCommit` — i.e. the first byte of a 2xx/3xx HTTP\n   * response has been received and content parsing has started. Page-ready\n   * (e.g. the hosted iframe's `iframe-ready-*` handshake) is a separate\n   * concern and must be observed by the caller via the message bus; this\n   * Promise does not wait for it.\n   *\n   * Rejects with a `code` of `webview_<reason>` where `<reason>` is one of:\n   *   - `invalid_url` — URL string was not parseable\n   *   - `no_host_view` — no foreground window to attach the WebView\n   *   - `http_error` — response status was >= 400 (userInfo contains `DynamicWebViewStatusCode`)\n   *   - `navigation_failed` — DNS, TLS, connection failure, or post-commit abort\n   *   - `cancelled` — `close(instanceId)` was called while this open was pending\n   *   - `instance_busy` — `open` was called for an instanceId that already has an active WebView\n   *   - `content_process_terminated` — the WKWebView WebContent process died during load\n   *   - `unsupported` — the device's Android System WebView is too old to support the secure bridge (Android only)\n   *\n   * rejection codes into typed `WebViewLoadFailedError` instances.\n   */\n  open(instanceId: string, url: string): Promise<void>;\n  removeListeners(count: number): void;\n  sendMessage(instanceId: string, data: UnsafeObject): void;\n}\n\n// eslint-disable-next-line import/no-default-export\nexport default TurboModuleRegistry.get<Spec>('DynamicClientWebView');\n","import { BaseError } from './base/BaseError';\n\n/**\n * Discriminator for `WebViewLoadFailedError`. Identifies the specific\n * failure mode so callers can branch on it (e.g. retry on transient\n * navigation failures, abort on invalid URL, treat HTTP errors distinct\n * from network errors).\n */\nexport type WebViewLoadFailureReason =\n  | 'invalid_url'\n  | 'no_host_view'\n  | 'http_error'\n  | 'navigation_failed'\n  | 'cancelled'\n  | 'instance_busy'\n  | 'content_process_terminated'\n  | 'unsupported';\n\ntype WebViewLoadFailedErrorParams = {\n  cause?: Error | null;\n  reason: WebViewLoadFailureReason;\n  shortMessage: string;\n  /** HTTP response status code. Populated only when `reason === 'http_error'`. */\n  statusCode?: number;\n  /** Underlying OS-level error description (e.g. `NSURLErrorDomain`\n   *  localizedDescription). Populated for `reason === 'navigation_failed'`. */\n  underlyingError?: string;\n};\n\n/**\n * Thrown when `DynamicWebView.open()` (via the WaaS transport provider)\n * fails to establish a usable load. Inspect `reason` to distinguish the\n * failure mode; `statusCode` and `underlyingError` provide structured\n * metadata for the cases that have it.\n */\nexport class WebViewLoadFailedError extends BaseError {\n  readonly reason: WebViewLoadFailureReason;\n  readonly statusCode: number | undefined;\n  readonly underlyingError: string | undefined;\n\n  constructor({\n    reason,\n    shortMessage,\n    cause = null,\n    statusCode,\n    underlyingError,\n  }: WebViewLoadFailedErrorParams) {\n    super({\n      cause,\n      code: 'webview_load_failed_error',\n      details: underlyingError,\n      docsUrl: null,\n      name: 'WebViewLoadFailedError',\n      shortMessage,\n    });\n    this.reason = reason;\n    this.statusCode = statusCode;\n    this.underlyingError = underlyingError;\n  }\n}\n","import {\n  WebViewLoadFailedError,\n  type WebViewLoadFailureReason,\n} from '../../../errors/WebViewLoadFailedError';\n\n// Maps the native-side RCT reject codes (emitted by DynamicWebView.mm) to the\n// JS-level discriminator on `WebViewLoadFailedError`. Keys must stay in sync\n// with the `Reason.*` strings in DynamicWebViewImpl.swift.\nconst REASON_BY_NATIVE_CODE: Record<string, WebViewLoadFailureReason> = {\n  webview_cancelled: 'cancelled',\n  webview_content_process_terminated: 'content_process_terminated',\n  webview_http_error: 'http_error',\n  webview_instance_busy: 'instance_busy',\n  webview_invalid_url: 'invalid_url',\n  webview_navigation_failed: 'navigation_failed',\n  webview_no_host_view: 'no_host_view',\n  webview_unsupported: 'unsupported',\n};\n\n// React Native serializes the native NSError's userInfo onto the JS Error as\n// `userInfo`. These keys must stay in sync with the `errorStatusCodeKey` /\n// `errorUnderlyingDescriptionKey` constants in DynamicWebViewImpl.swift.\ntype NativeRejection = {\n  code?: string;\n  message?: string;\n  userInfo?: {\n    DynamicWebViewStatusCode?: number;\n    DynamicWebViewUnderlying?: string;\n  };\n};\n\n/**\n * Translates a native `DynamicWebView.open()` rejection into a typed\n * `WebViewLoadFailedError`. Maps the native RCT reject code to the JS-level\n * `WebViewLoadFailureReason` discriminator (falling back to\n * `navigation_failed` for unrecognized codes) and carries through the\n * structured `statusCode` / `underlyingError` metadata.\n *\n * The `reason` it produces is the contract `createWaasSDKContainer` branches\n * on — notably `emitError` swallows `cancelled` because that code is only ever\n * produced by our own `close()` teardown (verified on both the iOS and Android\n * native sides). Keep `REASON_BY_NATIVE_CODE` in sync with the native reject\n * codes so that branching stays correct.\n *\n * @notInstrumented\n */\nexport const translateNativeOpenError = (\n  err: unknown\n): WebViewLoadFailedError => {\n  const rejection = (err ?? {}) as NativeRejection;\n\n  // Must check the KEYS of REASON_BY_NATIVE_CODE (the `webview_*` native\n  // codes), not its values (the JS-level reasons) — this is called with the\n  // native code, so checking values made every code fall through to\n  // `navigation_failed` and silently broke the `cancelled` swallow.\n  const isNativeRejectionCode = (\n    code: string | undefined\n  ): code is keyof typeof REASON_BY_NATIVE_CODE =>\n    code != undefined && code in REASON_BY_NATIVE_CODE;\n\n  const reason: WebViewLoadFailureReason = isNativeRejectionCode(rejection.code)\n    ? REASON_BY_NATIVE_CODE[rejection.code]\n    : 'navigation_failed';\n  return new WebViewLoadFailedError({\n    cause: err instanceof Error ? err : null,\n    reason,\n    shortMessage:\n      rejection.message ?? `DynamicWebView open failed (${reason}).`,\n    statusCode: rejection.userInfo?.DynamicWebViewStatusCode,\n    underlyingError: rejection.userInfo?.DynamicWebViewUnderlying,\n  });\n};\n","import type { WaasSDKContainer } from '@dynamic-labs-wallet/core';\nimport { NativeEventEmitter } from 'react-native';\n\nimport { NativeModuleNotLinkedError } from '../../../errors/NativeModuleNotLinkedError';\nimport NativeDynamicWebView from '../../../turboModules/NativeDynamicWebView';\nimport { translateNativeOpenError } from './translateNativeOpenError';\n\nconst NATIVE_MODULE_NAME = 'DynamicClientWebView';\nconst MESSAGE_EVENT_NAME = 'dynamicBridgeMessage';\n\ntype BridgeEventPayload = {\n  data: unknown;\n  instanceId: string;\n};\n\n// The instance ID routes bridge messages to the right container, so it must be\n// globally unique. Use a crypto-random UUID (no Math.random) keyed by timestamp\n// for readability across app reloads.\nconst generateInstanceId = (): string =>\n  `${Date.now().toString(36)}-${crypto.randomUUID()}`;\n\n/**\n * Creates a React Native `WaasSDKContainer` backed by a hidden, headless native\n * WebView (WKWebView on iOS, `android.webkit.WebView` on Android) hosted by the\n * `DynamicClientWebView` TurboModule. Each invocation returns an isolated\n * container with its own instance ID, native WebView, and message routing.\n *\n * Used for MPC operations (signing, key-share management) where there is\n * nothing for the user to see. The VISIBLE private-key export display is no\n * longer a native overlay — it is rendered by the `ExportPrivateKey` component\n * (`@dynamic-labs-sdk/react-native-embedded-wallet-export`) on top of\n * `react-native-webview`, so it scrolls and positions like any RN view.\n *\n * @notInstrumented\n */\nexport const createNativeWaasSDKContainer = (): WaasSDKContainer => {\n  if (!NativeDynamicWebView) {\n    throw new NativeModuleNotLinkedError({ moduleName: NATIVE_MODULE_NAME });\n  }\n\n  const nativeModule = NativeDynamicWebView;\n  const instanceId = generateInstanceId();\n  // Construct the emitter against the TurboModule itself — on New Arch,\n  // `NativeModules[name]` can be a different compatibility-shim object,\n  // and binding `addListener`/`removeListeners` on the wrong instance\n  // leaves `startObserving` in the native emitter never firing.\n  const emitter = new NativeEventEmitter(\n    nativeModule as unknown as ConstructorParameters<typeof NativeEventEmitter>[0]\n  );\n\n  // IframeManager on the WaaS SDK calls `container.onMessage(handler)` twice\n  // on the same container — once to wait for the `iframe-ready-*` handshake,\n  // and once later from `setupWaasSDKContainerBridge` to forward transport\n  // messages. Both handlers need to receive every message, so the container\n  // fans out to all registered handlers instead of enforcing single-register.\n  const messageHandlers: Array<(data: unknown) => void> = [];\n  const errorHandlers: Array<(error: unknown) => void> = [];\n  let subscription: { remove: () => void } | null = null;\n  let destroyed = false;\n\n  const emitError = (err: unknown): void => {\n    if (destroyed) return;\n    const translated = translateNativeOpenError(err);\n    // `cancelled` is only ever produced by our own `close()` teardown path on\n    // the native side. Surfacing it via onError would make consumers like\n    // IframeManager interpret their own destroy as a load failure and retry\n    // against a provider that no longer exists.\n    if (translated.reason === 'cancelled') return;\n    for (const handler of errorHandlers) {\n      handler(translated);\n    }\n  };\n\n  return {\n    destroy() {\n      if (destroyed) return;\n      destroyed = true;\n\n      subscription?.remove();\n      subscription = null;\n      messageHandlers.length = 0;\n      errorHandlers.length = 0;\n      nativeModule.close(instanceId);\n    },\n\n    isAlive: () => !destroyed,\n\n    // Signature is dictated by the upstream WaasSDKContainer interface.\n    // eslint-disable-next-line custom-rules/require-single-object-param\n    onError(handler: (error: unknown) => void) {\n      errorHandlers.push(handler);\n      return () => {\n        const index = errorHandlers.indexOf(handler);\n        if (index !== -1) errorHandlers.splice(index, 1);\n      };\n    },\n\n    // Signature is dictated by the upstream WaasSDKContainer interface.\n    // eslint-disable-next-line custom-rules/require-single-object-param\n    onMessage(handler: (data: unknown) => void) {\n      messageHandlers.push(handler);\n\n      subscription ??= emitter.addListener(\n        MESSAGE_EVENT_NAME,\n        (payload: BridgeEventPayload) => {\n          if (payload.instanceId !== instanceId) return;\n\n          for (const fn of messageHandlers) {\n            fn(payload.data);\n          }\n        }\n      );\n\n      // WaaS client expects onMessage to return an unsubscribe function —\n      // used e.g. to tear down the one-shot handshake handler.\n      return () => {\n        const index = messageHandlers.indexOf(handler);\n        if (index !== -1) messageHandlers.splice(index, 1);\n        if (messageHandlers.length === 0) {\n          subscription?.remove();\n          subscription = null;\n        }\n      };\n    },\n\n    sendMessage(data: Record<string, unknown>) {\n      nativeModule.sendMessage(instanceId, data);\n    },\n    /**\n     * Hands the URL off to the native WebView and resolves immediately.\n     *\n     * Per the `WaasSDKContainer` contract (see `@dynamic-labs-wallet/core`\n     * types), `setUrl` resolves once the URL has been handed off to the\n     * container — NOT when the page has finished loading. Load completion is\n     * signalled later via the `iframe-ready-*` message on `onMessage`, and\n     * navigation failures surface via `onError`. This dispatch-and-forget\n     * shape is load-bearing: the WaaS handshake sequencing expects `setUrl` to\n     * resolve before the first message arrives, so the native open is\n     * intentionally NOT awaited/returned — its rejection (HTTP errors,\n     * navigation failures, preflight errors, etc.) is routed through\n     * `emitError` instead. Do not change this to `return nativeModule.open(...)`.\n     */\n    // Signature is dictated by the upstream WaasSDKContainer interface.\n    // eslint-disable-next-line custom-rules/require-single-object-param\n    async setUrl(url: string) {\n      nativeModule.open(instanceId, url).catch(emitError);\n    },\n  };\n};\n","import type { WaasSDKContainer } from '@dynamic-labs-wallet/core';\n\nimport { createNativeWaasSDKContainer } from './createNativeWaasSDKContainer.native';\n\n/**\n * Creates a React Native `WaasSDKContainer` backed by a hidden, headless native\n * WebView (WKWebView on iOS, `android.webkit.WebView` on Android) hosted by the\n * `DynamicClientWebView` TurboModule. Used for MPC operations (signing, key-share\n * management) where there is nothing for the user to see.\n *\n * For the private-key export display — where the hosted page must render the\n * key for the user — use the `ExportPrivateKey` component from\n * `@dynamic-labs-sdk/react-native-embedded-wallet-export`, which renders the\n * key inside a `react-native-webview` instead of a native overlay.\n *\n * @notInstrumented\n */\nexport const createWaasSDKContainer = (): WaasSDKContainer =>\n  createNativeWaasSDKContainer();\n","import type { AuthMode } from '@dynamic-labs-wallet/browser-wallet-client';\nimport { DynamicWalletClient } from '@dynamic-labs-wallet/browser-wallet-client';\nimport type { SecureStorageAdapter } from '@dynamic-labs-wallet/core';\nimport {\n  ACCESSIBLE,\n  getGenericPassword,\n  resetGenericPassword,\n  setGenericPassword,\n} from 'react-native-keychain';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { CorruptedKeyShareError } from '../../../errors/CorruptedKeyShareError';\nimport { CLIENT_SDK_NAME } from '../../apiClient/constants';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport {\n  DEFAULT_WAAS_BASE_API_URL,\n  DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,\n} from '../constants';\nimport type { CreateWaasClient } from './createWaasClient.types';\nimport { createWaasSDKContainer } from './createWaasSDKContainer.native';\n\n/**\n * Keychain security options for the client key share. The share is wallet\n * key material that cannot be re-derived locally, so the options are pinned\n * explicitly rather than inherited from `react-native-keychain` defaults\n * (which vary across versions and platforms).\n *\n * `WHEN_UNLOCKED_THIS_DEVICE_ONLY` keeps the share readable only while the\n * device is unlocked, excludes it from iCloud Keychain sync, and prevents it\n * migrating to a new device on encrypted-backup restore. It deliberately does\n * NOT set `accessControl` (e.g. biometry) — reads must not surface a Face ID /\n * passcode prompt, since the share is read on routine wallet operations.\n */\nconst KEY_SHARE_KEYCHAIN_OPTIONS = {\n  accessible: ACCESSIBLE.WHEN_UNLOCKED_THIS_DEVICE_ONLY,\n} as const;\n\n/** @notInstrumented */\nexport const createWaasClient: CreateWaasClient = ({ chainName }, client) => {\n  const core = getCore(client);\n\n  const additionalTrustedOrigins = core.waas?.additionalTrustedOrigins;\n\n  // Namespace the keychain service by environment so two environmentIds on the\n  // same device (or two dApps that observe the same account) can't collide and\n  // mix key shares. The account address alone is not unique across environments.\n  const getKeyShareService = (accountAddress: string): string =>\n    `${core.environmentId}:${accountAddress}`;\n\n  return new DynamicWalletClient(\n    {\n      authMode: (isCookieEnabled(client) ? 'cookie' : 'header') as AuthMode,\n      authToken: client.token || '',\n      baseApiUrl: (core.apiBaseUrl || DEFAULT_WAAS_BASE_API_URL).replace(\n        '/api/v0',\n        ''\n      ),\n      baseMPCRelayApiUrl:\n        client.projectSettings?.sdk.waas?.relayUrl ||\n        DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,\n      chainName,\n      environmentId: core.environmentId,\n      // On React Native there is no real `window.location.origin`, so the hosted\n      // iframe is told the app's universalLink as its host origin. This must be\n      // allowlisted in the environment's CORS/allowed origins, just like a web\n      // app's domain. Without it the WaaS server rejects the iframe load (400).\n      hostOrigin: core.metadata?.universalLink,\n      sdkVersion: `${CLIENT_SDK_NAME}/${core.version}`,\n      ...(additionalTrustedOrigins == undefined\n        ? {}\n        : { additionalTrustedOrigins }),\n      ...(core.waas?.loadTimeoutMs == undefined\n        ? {}\n        : { iframeLoadTimeout: core.waas.loadTimeoutMs }),\n      ...(core.waas?.maxLoadRetries == undefined\n        ? {}\n        : { maxRetryAttempts: core.waas.maxLoadRetries }),\n    },\n    {\n      createWaasSDKContainer,\n      // Typed as the upstream SecureStorageAdapter so the key-share method\n      // signatures (and the `shares` payload type) stay compiler-enforced\n      // against the WaaS SDK contract rather than re-declared locally.\n      secureStorage: {\n        getClientKeyShare: async (accountAddress) => {\n          const result = await getGenericPassword({\n            service: getKeyShareService(accountAddress),\n          });\n\n          if (!result) {\n            return [];\n          }\n\n          // A corrupted or partially-written keychain entry makes JSON.parse\n          // throw mid key-share load. Surface a typed error instead of an\n          // unhandled rejection so callers can distinguish \"no share stored\"\n          // (empty result above) from \"share exists but is unreadable\".\n          try {\n            return JSON.parse(result.password);\n          } catch (cause) {\n            throw new CorruptedKeyShareError({\n              cause: cause instanceof Error ? cause : null,\n            });\n          }\n        },\n\n        removeClientKeyShare: async (accountAddress) => {\n          await resetGenericPassword({\n            service: getKeyShareService(accountAddress),\n          });\n        },\n\n        setClientKeyShare: async (accountAddress, shares) => {\n          await setGenericPassword(accountAddress, JSON.stringify(shares), {\n            ...KEY_SHARE_KEYCHAIN_OPTIONS,\n            service: getKeyShareService(accountAddress),\n          });\n        },\n      } satisfies SecureStorageAdapter,\n    }\n  );\n};\n","import type { Chain } from '../../chain';\nimport { CHAINS_INFO_MAP } from '../../wallets/constants';\n\n/** @notInstrumented */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const getWaasChainNameFromChain = (chain: Chain): string => {\n  return CHAINS_INFO_MAP[chain].waasChainNameOverride || chain;\n};\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;;;;AAMA,IAAa,6BAAb,cAAgD,UAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;;;;;;;;;;ACEN,IAAa,yBAAb,cAA4C,UAAU;CACpD,YAAY,EAAE,QAAQ,SAAuC,EAAE,EAAE;AAC/D,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACaN,mCAAe,oBAAoB,IAAU,uBAAuB;;;;;;;;;;ACJpE,IAAa,yBAAb,cAA4C,UAAU;CACpD,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,EACV,QACA,cACA,QAAQ,MACR,YACA,mBAC+B;AAC/B,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,SAAS;GACT,MAAM;GACN;GACD,CAAC;AACF,OAAK,SAAS;AACd,OAAK,aAAa;AAClB,OAAK,kBAAkB;;;;;;ACjD3B,MAAMA,wBAAkE;CACtE,mBAAmB;CACnB,oCAAoC;CACpC,oBAAoB;CACpB,uBAAuB;CACvB,qBAAqB;CACrB,2BAA2B;CAC3B,sBAAsB;CACtB,qBAAqB;CACtB;;;;;;;;;;;;;;;;AA6BD,MAAa,4BACX,QAC2B;CAC3B,MAAM,YAAa,OAAO,EAAE;CAM5B,MAAM,yBACJ,SAEA,QAAQ,UAAa,QAAQ;CAE/B,MAAMC,SAAmC,sBAAsB,UAAU,KAAK,GAC1E,sBAAsB,UAAU,QAChC;AACJ,QAAO,IAAI,uBAAuB;EAChC,OAAO,eAAe,QAAQ,MAAM;EACpC;EACA,cACE,UAAU,WAAW,+BAA+B,OAAO;EAC7D,YAAY,UAAU,UAAU;EAChC,iBAAiB,UAAU,UAAU;EACtC,CAAC;;;;;AC/DJ,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAU3B,MAAM,2BACJ,GAAG,KAAK,KAAK,CAAC,SAAS,GAAG,CAAC,GAAG,OAAO,YAAY;;;;;;;;;;;;;;;AAgBnD,MAAa,qCAAuD;AAClE,KAAI,CAACC,6BACH,OAAM,IAAI,2BAA2B,EAAE,YAAY,oBAAoB,CAAC;CAG1E,MAAM,eAAeA;CACrB,MAAM,aAAa,oBAAoB;CAKvC,MAAM,UAAU,IAAI,mBAClB,aACD;CAOD,MAAMC,kBAAkD,EAAE;CAC1D,MAAMC,gBAAiD,EAAE;CACzD,IAAIC,eAA8C;CAClD,IAAI,YAAY;CAEhB,MAAM,aAAa,QAAuB;AACxC,MAAI,UAAW;EACf,MAAM,aAAa,yBAAyB,IAAI;AAKhD,MAAI,WAAW,WAAW,YAAa;AACvC,OAAK,MAAM,WAAW,cACpB,SAAQ,WAAW;;AAIvB,QAAO;EACL,UAAU;AACR,OAAI,UAAW;AACf,eAAY;AAEZ,iBAAc,QAAQ;AACtB,kBAAe;AACf,mBAAgB,SAAS;AACzB,iBAAc,SAAS;AACvB,gBAAa,MAAM,WAAW;;EAGhC,eAAe,CAAC;EAIhB,QAAQ,SAAmC;AACzC,iBAAc,KAAK,QAAQ;AAC3B,gBAAa;IACX,MAAM,QAAQ,cAAc,QAAQ,QAAQ;AAC5C,QAAI,UAAU,GAAI,eAAc,OAAO,OAAO,EAAE;;;EAMpD,UAAU,SAAkC;AAC1C,mBAAgB,KAAK,QAAQ;AAE7B,oBAAiB,QAAQ,YACvB,qBACC,YAAgC;AAC/B,QAAI,QAAQ,eAAe,WAAY;AAEvC,SAAK,MAAM,MAAM,gBACf,IAAG,QAAQ,KAAK;KAGrB;AAID,gBAAa;IACX,MAAM,QAAQ,gBAAgB,QAAQ,QAAQ;AAC9C,QAAI,UAAU,GAAI,iBAAgB,OAAO,OAAO,EAAE;AAClD,QAAI,gBAAgB,WAAW,GAAG;AAChC,mBAAc,QAAQ;AACtB,oBAAe;;;;EAKrB,YAAY,MAA+B;AACzC,gBAAa,YAAY,YAAY,KAAK;;EAkB5C,MAAM,OAAO,KAAa;AACxB,gBAAa,KAAK,YAAY,IAAI,CAAC,MAAM,UAAU;;EAEtD;;;;;;;;;;;;;;;;;;AClIH,MAAa,+BACX,8BAA8B;;;;;;;;;;;;;;;;ACehC,MAAM,6BAA6B,EACjC,YAAY,WAAW,gCACxB;;AAGD,MAAaC,oBAAsC,EAAE,aAAa,WAAW;CAC3E,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,2BAA2B,KAAK,MAAM;CAK5C,MAAM,sBAAsB,mBAC1B,GAAG,KAAK,cAAc,GAAG;AAE3B,QAAO,IAAI,oBACT;EACE,UAAW,gBAAgB,OAAO,GAAG,WAAW;EAChD,WAAW,OAAO,SAAS;EAC3B,aAAa,KAAK,cAAc,2BAA2B,QACzD,WACA,GACD;EACD,oBACE,OAAO,iBAAiB,IAAI,MAAM,YAClC;EACF;EACA,eAAe,KAAK;EAKpB,YAAY,KAAK,UAAU;EAC3B,YAAY,GAAG,gBAAgB,GAAG,KAAK;EACvC,GAAI,4BAA4B,SAC5B,EAAE,GACF,EAAE,0BAA0B;EAChC,GAAI,KAAK,MAAM,iBAAiB,SAC5B,EAAE,GACF,EAAE,mBAAmB,KAAK,KAAK,eAAe;EAClD,GAAI,KAAK,MAAM,kBAAkB,SAC7B,EAAE,GACF,EAAE,kBAAkB,KAAK,KAAK,gBAAgB;EACnD,EACD;EACE;EAIA,eAAe;GACb,mBAAmB,OAAO,mBAAmB;IAC3C,MAAM,SAAS,MAAM,mBAAmB,EACtC,SAAS,mBAAmB,eAAe,EAC5C,CAAC;AAEF,QAAI,CAAC,OACH,QAAO,EAAE;AAOX,QAAI;AACF,YAAO,KAAK,MAAM,OAAO,SAAS;aAC3B,OAAO;AACd,WAAM,IAAI,uBAAuB,EAC/B,OAAO,iBAAiB,QAAQ,QAAQ,MACzC,CAAC;;;GAIN,sBAAsB,OAAO,mBAAmB;AAC9C,UAAM,qBAAqB,EACzB,SAAS,mBAAmB,eAAe,EAC5C,CAAC;;GAGJ,mBAAmB,OAAO,gBAAgB,WAAW;AACnD,UAAM,mBAAmB,gBAAgB,KAAK,UAAU,OAAO,EAAE;KAC/D,GAAG;KACH,SAAS,mBAAmB,eAAe;KAC5C,CAAC;;GAEL;EACF,CACF;;;;;;ACnHH,MAAa,6BAA6B,UAAyB;AACjE,QAAO,gBAAgB,OAAO,yBAAyB;;;;;;ACMzD,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAAC,qBAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;ACgCT,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAAS,kBAAkB,KACgB;CAC3C,MAAM,YAAY,mBAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,sBAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAK,qBAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMC,sBAAY,OAAO;AAEzB,QAAO"}

package/dist/migrateFromFireblocks-BnHU2AZJ.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrateFromFireblocks-BnHU2AZJ.cjs","names":["BaseError","createWaasClient: CreateWaasClient","getCore","DynamicWalletClient","isCookieEnabled","DEFAULT_WAAS_BASE_API_URL","DEFAULT_WAAS_BASE_MPC_RELAY_API_URL","CLIENT_SDK_NAME","getSignedSessionId","logoutWithReason","CHAINS_INFO_MAP","getWalletProviderFromWalletAccount","isWaasWalletProvider","NotWaasWalletAccountError","getDefaultClient","getWalletProviders","NoWalletProviderFoundError","DYNAMIC_WAAS_METADATA","isWaasWalletProvider","refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/modules/waas/createWaasClient/createWaasClient.ts","../src/modules/waas/getWaasChainNameFromChain/getWaasChainNameFromChain.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import type { AuthMode } from '@dynamic-labs-wallet/browser-wallet-client';\nimport { DynamicWalletClient } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { CLIENT_SDK_NAME } from '../../apiClient/constants';\nimport { logoutWithReason } from '../../auth/logoutWithReason';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { getSignedSessionId } from '../../sessionKeys/getSignedSessionId';\nimport type { CreateWaasClient } from './createWaasClient.types';\nimport {\n  DEFAULT_WAAS_BASE_API_URL,\n  DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,\n} from '../constants';\n\n/** @notInstrumented */\nexport const createWaasClient: CreateWaasClient = ({ chainName }, client) => {\n  const core = getCore(client);\n\n  const additionalTrustedOrigins = core.waas?.additionalTrustedOrigins;\n\n  const baseClientKeysharesRelayApiUrl =\n    client.projectSettings?.sdk.waas?.customKeyshareRelayBaseUrl;\n\n  return new DynamicWalletClient(\n    {\n      authMode: (isCookieEnabled(client) ? 'cookie' : 'header') as AuthMode,\n      authToken: client.token || '',\n      baseApiUrl: (core.apiBaseUrl || DEFAULT_WAAS_BASE_API_URL).replace(\n        '/api/v0',\n        ''\n      ),\n      baseMPCRelayApiUrl:\n        client.projectSettings?.sdk.waas?.relayUrl ||\n        DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,\n      chainName,\n      // Opt into the SDK self-driving eager key-share recovery on auth-token\n      // arrival, so the client no longer restores shares itself on login.\n      eagerlyRecoverKeyShares: true,\n      environmentId: core.environmentId,\n      sdkVersion: `${CLIENT_SDK_NAME}/${core.version}`,\n      ...(additionalTrustedOrigins == undefined\n        ? {}\n        : { additionalTrustedOrigins }),\n      ...(baseClientKeysharesRelayApiUrl == undefined\n        ? {}\n        : { baseClientKeysharesRelayApiUrl }),\n      ...(core.waas?.loadTimeoutMs == undefined\n        ? {}\n        : { iframeLoadTimeout: core.waas.loadTimeoutMs }),\n      ...(core.waas?.maxLoadRetries == undefined\n        ? {}\n        : { maxRetryAttempts: core.waas.maxLoadRetries }),\n    },\n    {\n      // Lets the iframe mint a fresh signed session id over the reverse channel,\n      // which the SDK's eager key-share recovery needs.\n      getSignedSessionId: () =>\n        getSignedSessionId(client).then(({ signature }) => signature),\n      // When the WaaS iframe's own backend call returns 401 (e.g. a forcibly\n      // revoked token), the iframe notifies the host via the reverse channel\n      // and this fires — log the user out. Mirrors the session-expiry\n      // middleware that covers the SDK's own direct API 401s.\n      onUnauthorized: () => {\n        void logoutWithReason(\n          { reason: 'session-refresh-unauthorized' },\n          client\n        ).catch((error) => {\n          core.logger.error(\n            'Failed to log out after WaaS unauthorized response',\n            error\n          );\n        });\n      },\n    }\n  );\n};\n","import type { Chain } from '../../chain';\nimport { CHAINS_INFO_MAP } from '../../wallets/constants';\n\n/** @notInstrumented */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const getWaasChainNameFromChain = (chain: Chain): string => {\n  return CHAINS_INFO_MAP[chain].waasChainNameOverride || chain;\n};\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;;;AAMA,IAAa,6BAAb,cAAgDA,+CAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;ACCN,MAAaC,oBAAsC,EAAE,aAAa,WAAW;CAC3E,MAAM,OAAOC,6CAAQ,OAAO;CAE5B,MAAM,2BAA2B,KAAK,MAAM;CAE5C,MAAM,iCACJ,OAAO,iBAAiB,IAAI,MAAM;AAEpC,QAAO,IAAIC,+DACT;EACE,UAAWC,qDAAgB,OAAO,GAAG,WAAW;EAChD,WAAW,OAAO,SAAS;EAC3B,aAAa,KAAK,cAAcC,gEAA2B,QACzD,WACA,GACD;EACD,oBACE,OAAO,iBAAiB,IAAI,MAAM,YAClCC;EACF;EAGA,yBAAyB;EACzB,eAAe,KAAK;EACpB,YAAY,GAAGC,qDAAgB,GAAG,KAAK;EACvC,GAAI,4BAA4B,SAC5B,EAAE,GACF,EAAE,0BAA0B;EAChC,GAAI,kCAAkC,SAClC,EAAE,GACF,EAAE,gCAAgC;EACtC,GAAI,KAAK,MAAM,iBAAiB,SAC5B,EAAE,GACF,EAAE,mBAAmB,KAAK,KAAK,eAAe;EAClD,GAAI,KAAK,MAAM,kBAAkB,SAC7B,EAAE,GACF,EAAE,kBAAkB,KAAK,KAAK,gBAAgB;EACnD,EACD;EAGE,0BACEC,8CAAmB,OAAO,CAAC,MAAM,EAAE,gBAAgB,UAAU;EAK/D,sBAAsB;AACpB,GAAKC,gEACH,EAAE,QAAQ,gCAAgC,EAC1C,OACD,CAAC,OAAO,UAAU;AACjB,SAAK,OAAO,MACV,sDACA,MACD;KACD;;EAEL,CACF;;;;;;ACrEH,MAAa,6BAA6B,UAAyB;AACjE,QAAOC,qDAAgB,OAAO,yBAAyB;;;;;;ACMzD,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiBC,wEACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAACC,0DAAqB,eAAe,CACvC,OAAM,IAAIC,uDAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;ACgCT,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAASC,uDAAkB,KACgB;CAC3C,MAAM,YAAYC,wDAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAIC,gEAA2B,EACnC,mBAAmBC,2DAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAKC,0DAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMC,mDAAY,OAAO;AAEzB,QAAO"}

package/dist/migrateFromFireblocks-DkQj3aYU.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrateFromFireblocks-DkQj3aYU.esm.js","names":["createWaasClient: CreateWaasClient","logoutWithReason","refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/modules/waas/createWaasClient/createWaasClient.ts","../src/modules/waas/getWaasChainNameFromChain/getWaasChainNameFromChain.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import type { AuthMode } from '@dynamic-labs-wallet/browser-wallet-client';\nimport { DynamicWalletClient } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { CLIENT_SDK_NAME } from '../../apiClient/constants';\nimport { logoutWithReason } from '../../auth/logoutWithReason';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { getSignedSessionId } from '../../sessionKeys/getSignedSessionId';\nimport type { CreateWaasClient } from './createWaasClient.types';\nimport {\n  DEFAULT_WAAS_BASE_API_URL,\n  DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,\n} from '../constants';\n\n/** @notInstrumented */\nexport const createWaasClient: CreateWaasClient = ({ chainName }, client) => {\n  const core = getCore(client);\n\n  const additionalTrustedOrigins = core.waas?.additionalTrustedOrigins;\n\n  const baseClientKeysharesRelayApiUrl =\n    client.projectSettings?.sdk.waas?.customKeyshareRelayBaseUrl;\n\n  return new DynamicWalletClient(\n    {\n      authMode: (isCookieEnabled(client) ? 'cookie' : 'header') as AuthMode,\n      authToken: client.token || '',\n      baseApiUrl: (core.apiBaseUrl || DEFAULT_WAAS_BASE_API_URL).replace(\n        '/api/v0',\n        ''\n      ),\n      baseMPCRelayApiUrl:\n        client.projectSettings?.sdk.waas?.relayUrl ||\n        DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,\n      chainName,\n      // Opt into the SDK self-driving eager key-share recovery on auth-token\n      // arrival, so the client no longer restores shares itself on login.\n      eagerlyRecoverKeyShares: true,\n      environmentId: core.environmentId,\n      sdkVersion: `${CLIENT_SDK_NAME}/${core.version}`,\n      ...(additionalTrustedOrigins == undefined\n        ? {}\n        : { additionalTrustedOrigins }),\n      ...(baseClientKeysharesRelayApiUrl == undefined\n        ? {}\n        : { baseClientKeysharesRelayApiUrl }),\n      ...(core.waas?.loadTimeoutMs == undefined\n        ? {}\n        : { iframeLoadTimeout: core.waas.loadTimeoutMs }),\n      ...(core.waas?.maxLoadRetries == undefined\n        ? {}\n        : { maxRetryAttempts: core.waas.maxLoadRetries }),\n    },\n    {\n      // Lets the iframe mint a fresh signed session id over the reverse channel,\n      // which the SDK's eager key-share recovery needs.\n      getSignedSessionId: () =>\n        getSignedSessionId(client).then(({ signature }) => signature),\n      // When the WaaS iframe's own backend call returns 401 (e.g. a forcibly\n      // revoked token), the iframe notifies the host via the reverse channel\n      // and this fires — log the user out. Mirrors the session-expiry\n      // middleware that covers the SDK's own direct API 401s.\n      onUnauthorized: () => {\n        void logoutWithReason(\n          { reason: 'session-refresh-unauthorized' },\n          client\n        ).catch((error) => {\n          core.logger.error(\n            'Failed to log out after WaaS unauthorized response',\n            error\n          );\n        });\n      },\n    }\n  );\n};\n","import type { Chain } from '../../chain';\nimport { CHAINS_INFO_MAP } from '../../wallets/constants';\n\n/** @notInstrumented */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const getWaasChainNameFromChain = (chain: Chain): string => {\n  return CHAINS_INFO_MAP[chain].waasChainNameOverride || chain;\n};\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;;;AAMA,IAAa,6BAAb,cAAgD,UAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;ACCN,MAAaA,oBAAsC,EAAE,aAAa,WAAW;CAC3E,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,2BAA2B,KAAK,MAAM;CAE5C,MAAM,iCACJ,OAAO,iBAAiB,IAAI,MAAM;AAEpC,QAAO,IAAI,oBACT;EACE,UAAW,gBAAgB,OAAO,GAAG,WAAW;EAChD,WAAW,OAAO,SAAS;EAC3B,aAAa,KAAK,cAAc,2BAA2B,QACzD,WACA,GACD;EACD,oBACE,OAAO,iBAAiB,IAAI,MAAM,YAClC;EACF;EAGA,yBAAyB;EACzB,eAAe,KAAK;EACpB,YAAY,GAAG,gBAAgB,GAAG,KAAK;EACvC,GAAI,4BAA4B,SAC5B,EAAE,GACF,EAAE,0BAA0B;EAChC,GAAI,kCAAkC,SAClC,EAAE,GACF,EAAE,gCAAgC;EACtC,GAAI,KAAK,MAAM,iBAAiB,SAC5B,EAAE,GACF,EAAE,mBAAmB,KAAK,KAAK,eAAe;EAClD,GAAI,KAAK,MAAM,kBAAkB,SAC7B,EAAE,GACF,EAAE,kBAAkB,KAAK,KAAK,gBAAgB;EACnD,EACD;EAGE,0BACE,mBAAmB,OAAO,CAAC,MAAM,EAAE,gBAAgB,UAAU;EAK/D,sBAAsB;AACpB,GAAKC,2BACH,EAAE,QAAQ,gCAAgC,EAC1C,OACD,CAAC,OAAO,UAAU;AACjB,SAAK,OAAO,MACV,sDACA,MACD;KACD;;EAEL,CACF;;;;;;ACrEH,MAAa,6BAA6B,UAAyB;AACjE,QAAO,gBAAgB,OAAO,yBAAyB;;;;;;ACMzD,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAAC,qBAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;ACgCT,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAAS,kBAAkB,KACgB;CAC3C,MAAM,YAAY,mBAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,sBAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAK,qBAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMC,sBAAY,OAAO;AAEzB,QAAO"}