@dynamic-labs-sdk/client 1.23.1 → 1.24.1

package/dist/index.native.esm.js

@@ -1,12 +1,13 @@
-import { $ as UnauthorizedError, B as onEvent, Ct as name, E as getWalletProviderRegistry, F as normalizeAddress, H as createApiClient, I as splitWalletProviderKey, K as getNonce, M as getChainFromVerifiedCredentialChain, N as CHAINS_INFO_MAP, O as NoWalletProviderFoundError, P as formatWalletAccountId, Q as createLocalStorageAdapter, R as emitEvent, S as extractSessionId, St as getCore, T as WalletProviderPriority, V as onceEvent, X as updateNoncePoolStorage, Y as fetchAndStoreNonces, Z as createStorageKeySchema, _ as instrumentFunction, _t as NONCE_POOL_SIZE, a as InvalidParamError, at as APIError, b as getUserAgent, ct as DYNAMIC_ICONIC_SPRITE_URL, dt as isCookieEnabled, et as SandboxMaximumThresholdReachedError, ft as assertDefined, gt as getPlatform, h as checkAndRaiseWalletAccountsChangedEvent, ht as randomString, i as parseElevatedAccessToken, it as InvalidExternalAuthError, k as getWalletAccounts, lt as SDK_API_CORE_VERSION, m as isUserMissingMfaAuth, mt as getElevatedAccessToken, n as updateAuthFromVerifyResponse, nt as MfaInvalidOtpError, o as initializeWaasClientsForEagerRecovery, p as getWalletProviders, pt as ValueMustBeDefinedError, r as upsertElevatedAccessToken, rt as LinkCredentialError, tt as MfaRateLimitedError, v as scrubParameters, vt as getDefaultClient, w as getWalletProviderFromWalletAccount, wt as version, x as getOperatingSystem, xt as BaseError, y as DEFAULT_PII_FIELDS, yt as setDefaultClient, z as offEvent } from "./NativeModuleNotLinkedError-DLP1hpcM.native.esm.js";
-import { B as subscribeWithSelector, C as getKeychainIndexedDBName, E as assertSafeNavigationUrl, F as INITIALIZE_STORAGE_SYNC_TRACKER_KEY, H as createStorage, I as REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY, L as REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY, M as createDeferredPromise, N as FETCH_PROJECT_SETTINGS_TRACKER_KEY, O as createLogger, P as GENERATE_SESSION_KEYS_TRACKER_KEY, R as isServerSideRendering, S as MergeAccountsConfirmationError, T as createKeychainService, V as isEqualShallow, _ as getAppMetadata, a as verifyMessageSignatureOwnership, b as WalletAlreadyLinkedToAnotherUserError, c as formatSignInMessage, d as setUnverifiedWalletAccounts, f as createVisit, g as isCaptchaRequired, h as consumeCaptchaToken, i as getNetworksData, j as CannotTrackError, k as createCrossTabBroadcast, l as reconcileWalletAccountsAgainstClient, m as __setCaptchaToken_wrapped, o as removeUnverifiedWalletAccount, p as hasExtension, s as createSignInMessageStatement, t as getNetworkProviderFromNetworkId, u as updateWalletProviderKeysForVerifiedCredentials, v as MethodNotImplementedError, w as createRealtimeService, x as NoNetworkProvidersError, y as WalletScreeningBlockedError, z as getBuffer } from "./getNetworkProviderFromNetworkId-Bh4_-rhf.native.esm.js";
-import { a as fetchProjectSettings, i as generateSessionKeys, n as getVerifiedCredentialForWalletAccount, o as isSignedIn, r as __logoutWithReason_wrapped, s as retryOnFail, t as getWalletProviderByKey } from "./getWalletProviderByKey-0VBVdu30.native.esm.js";
-import { n as NotWaasWalletAccountError, r as __refreshAuth_wrapped } from "./isDynamicWaasEnabled-cVxCp5BV.native.esm.js";
-import { a as WaasOnboardingIncompleteError, i as preconnectWaasIframe, n as isPendingRecoveryCodesAcknowledgment, o as WaasLoadFailedError, r as isDeviceRegistrationRequired, t as isUserOnboardingComplete } from "./isUserOnboardingComplete-BCZpska8.native.esm.js";
-import { n as getMfaMethods, r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-DjC0wQJ4.native.esm.js";
+import { $ as UnauthorizedError, B as onEvent, Ct as name, E as getWalletProviderRegistry, F as normalizeAddress, H as createApiClient, I as splitWalletProviderKey, K as getNonce, M as getChainFromVerifiedCredentialChain, N as CHAINS_INFO_MAP, O as NoWalletProviderFoundError, P as formatWalletAccountId, Q as createLocalStorageAdapter, R as emitEvent, S as extractSessionId, St as getCore, T as WalletProviderPriority, V as onceEvent, X as updateNoncePoolStorage, Y as fetchAndStoreNonces, Z as createStorageKeySchema, _ as instrumentFunction, _t as NONCE_POOL_SIZE, a as InvalidParamError, at as APIError, b as getUserAgent, ct as DYNAMIC_ICONIC_SPRITE_URL, dt as isCookieEnabled, et as SandboxMaximumThresholdReachedError, ft as assertDefined, gt as getPlatform, h as checkAndRaiseWalletAccountsChangedEvent, ht as randomString, i as parseElevatedAccessToken, it as InvalidExternalAuthError, k as getWalletAccounts, lt as SDK_API_CORE_VERSION, m as isUserMissingMfaAuth, mt as getElevatedAccessToken, n as updateAuthFromVerifyResponse, nt as MfaInvalidOtpError, o as initializeWaasClientsForEagerRecovery, p as getWalletProviders, pt as ValueMustBeDefinedError, r as upsertElevatedAccessToken, rt as LinkCredentialError, tt as MfaRateLimitedError, v as scrubParameters, vt as getDefaultClient, w as getWalletProviderFromWalletAccount, wt as version, x as getOperatingSystem, xt as BaseError, y as DEFAULT_PII_FIELDS, yt as setDefaultClient, z as offEvent } from "./NativeModuleNotLinkedError-dFDBC524.native.esm.js";
+import { A as createCrossTabBroadcast, B as getBuffer, C as getKeychainIndexedDBName, D as assertSafeNavigationUrl, E as createKeychainService, F as GENERATE_SESSION_KEYS_TRACKER_KEY, H as isEqualShallow, I as INITIALIZE_STORAGE_SYNC_TRACKER_KEY, L as REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY, M as CannotTrackError, N as createDeferredPromise, P as FETCH_PROJECT_SETTINGS_TRACKER_KEY, R as REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY, S as MergeAccountsConfirmationError, T as assertSafeDeeplinkUrl, U as createStorage, V as subscribeWithSelector, _ as getAppMetadata, a as verifyMessageSignatureOwnership, b as WalletAlreadyLinkedToAnotherUserError, c as formatSignInMessage, d as setUnverifiedWalletAccounts, f as createVisit, g as isCaptchaRequired, h as consumeCaptchaToken, i as getNetworksData, k as createLogger, l as reconcileWalletAccountsAgainstClient, m as __setCaptchaToken_wrapped, o as removeUnverifiedWalletAccount, p as hasExtension, s as createSignInMessageStatement, t as getNetworkProviderFromNetworkId, u as updateWalletProviderKeysForVerifiedCredentials, v as MethodNotImplementedError, w as createRealtimeService, x as NoNetworkProvidersError, y as WalletScreeningBlockedError, z as isServerSideRendering } from "./getNetworkProviderFromNetworkId-nLBIQ_5p.native.esm.js";
+import { a as fetchProjectSettings, i as generateSessionKeys, n as getVerifiedCredentialForWalletAccount, o as isSignedIn, r as __logoutWithReason_wrapped, s as retryOnFail, t as getWalletProviderByKey } from "./getWalletProviderByKey-DPZP397j.native.esm.js";
+import { n as NotWaasWalletAccountError, r as __refreshAuth_wrapped } from "./isDynamicWaasEnabled-BmB0lQJf.native.esm.js";
+import { a as WaasOnboardingIncompleteError, i as preconnectWaasIframe, n as isPendingRecoveryCodesAcknowledgment, o as WaasLoadFailedError, r as isDeviceRegistrationRequired, t as isUserOnboardingComplete } from "./isUserOnboardingComplete-Ebw4x90F.native.esm.js";
+import { n as getMfaMethods, r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-DP0kk0tY.native.esm.js";
 import { assertPackageVersion } from "@dynamic-labs-sdk/assert-package-version";
 import { AuthModeEnum, CaptchaProviderEnum as CaptchaProviderEnum$1, ExchangeKeyEnum, JwtVerifiedCredentialFormatEnum, JwtVerifiedCredentialFormatEnum as JwtVerifiedCredentialFormatEnum$1, MFAAction, MfaBackupCodeAcknowledgement, ProviderEnum, ProviderEnum as ProviderEnum$1, TokenScope, TokenScope as TokenScope$1, WaasBackupOptionsEnum, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
 import * as z from "zod/mini";
+import { Linking } from "react-native";
 import EventEmitter, { EventEmitter as EventEmitter$1 } from "eventemitter3";
 import { Passkey } from "react-native-passkey";
 
@@ -777,82 +778,22 @@ const createNavigationHandler = () => {
 };
 
 //#endregion
-//#region src/errors/UnsafeDeeplinkUrlError.ts
+//#region src/services/openDeeplink/createDeeplinkOpener/createDeeplinkOpener.native.ts
 /**
-* Thrown when a deeplink is opened with a URL whose scheme can execute script
-* in the current origin (`javascript:`, `data:`, `vbscript:`). Unlike
-* navigation, deeplinks legitimately use custom app schemes (e.g. `phantom:`,
-* `metamask:`), so this guards via a denylist of dangerous schemes rather than
-* an `http(s)` allowlist, preventing DOM XSS through the `window.location.assign`
-* sink while leaving valid wallet deeplinks untouched.
-*/
-var UnsafeDeeplinkUrlError = class extends BaseError {
-	constructor({ scheme }) {
-		super({
-			cause: null,
-			code: "unsafe_deeplink_url_error",
-			docsUrl: null,
-			name: "UnsafeDeeplinkUrlError",
-			shortMessage: `Refusing to open a deeplink with an unsafe scheme "${scheme}". Script-executing schemes (javascript:, data:, vbscript:) are not allowed. This may indicate a compromised or misconfigured deeplink URL.`
-		});
-	}
-};
-
-//#endregion
-//#region src/utils/assertSafeDeeplinkUrl/assertSafeDeeplinkUrl.ts
-/**
-* Schemes that can execute script in the current origin and must never reach a
-* deeplink navigation sink. Deeplinks legitimately use arbitrary custom app
-* schemes (e.g. `phantom:`, `metamask:`), so a denylist of dangerous schemes is
-* used here instead of the `http(s)` allowlist applied to standard navigation.
-*/
-const DANGEROUS_DEEPLINK_SCHEMES = new Set([
-	"javascript:",
-	"data:",
-	"vbscript:",
-	"blob:"
-]);
-/**
-* Asserts that the given deeplink URL is safe to open, i.e. its scheme is not
-* one that can execute script (`javascript:`, `data:`, `vbscript:`, `blob:`). Used as a
-* defense-in-depth guard on the `window.location.assign` deeplink sink to
-* prevent DOM XSS, while still permitting custom wallet app schemes.
+* React Native variant of the deeplink opener.
 *
-* @param url - The deeplink URL string to validate.
-* @throws {UnsafeDeeplinkUrlError} If the URL cannot be parsed or its scheme can execute script.
+* Metro resolves `.native.ts` over the plain `.ts` counterpart, so this file
+* is used exclusively in RN builds. React Native has no browser navigation, so
+* the web implementation (`window.location.assign`) is unusable — and RN's
+* read-only `location` throws on href assignment. `Linking.openURL` is the
+* platform primitive for handing a `metamask:`/`phantom:` pairing deeplink off
+* to the wallet app.
 * @notInstrumented
 */
-const assertSafeDeeplinkUrl = (url) => {
-	let parsed;
-	try {
-		parsed = new URL(url);
-	} catch {
-		throw new UnsafeDeeplinkUrlError({ scheme: "unknown" });
-	}
-	if (DANGEROUS_DEEPLINK_SCHEMES.has(parsed.protocol)) throw new UnsafeDeeplinkUrlError({ scheme: parsed.protocol });
-};
-
-//#endregion
-//#region src/services/openDeeplink/createWebDeeplinkOpener/createWebDeeplinkOpener.ts
-/**
-* Creates a deeplink opener that navigates the current tab to the deeplink URL.
-*
-* Uses `window.location.assign` instead of `window.open` deliberately.
-* This matters for Phantom redirect specifically, which is the only deep link
-* provider that redirects back to the app in a new tab. With `window.open`,
-* the browser first opens an `about:blank` tab before the native wallet app
-* handles the deep link. When Phantom redirects back, it opens yet another
-* tab. The user ends up with three tabs (original, about:blank, redirect) and
-* the browser focuses the lingering about:blank after the redirect tab closes.
-* `window.location.assign` reuses the current tab, avoiding the extra tab
-* entirely.
-* @notInstrumented
-*/
-const createWebDeeplinkOpener = () => {
-	if (isServerSideRendering()) return () => Promise.reject(new UnavailableInServerSideError("createWebDeeplinkOpener"));
+const createDeeplinkOpener = () => {
 	return async (url) => {
 		assertSafeDeeplinkUrl(url);
-		window.location.assign(url);
+		await Linking.openURL(url);
 	};
 };
 
@@ -1115,7 +1056,7 @@ const createCore = (config) => {
 		storageAdapter: config.coreConfig?.storageAdapter ?? createLocalStorageAdapter()
 	});
 	const fetch = config.coreConfig?.fetch ?? createWebFetch();
-	const openDeeplink = config.coreConfig?.openDeeplink ?? createWebDeeplinkOpener();
+	const openDeeplink = config.coreConfig?.openDeeplink ?? createDeeplinkOpener();
 	const openAuthSession = config.coreConfig?.openAuthSession;
 	const navigate = config.coreConfig?.navigate ?? createNavigationHandler();
 	const state = createObservableState(getInitialState);
@@ -3933,8 +3874,8 @@ const prepareFlowSigning = async ({ assertBalanceForGasCost, assertBalanceForTra
 			environmentId,
 			flowId,
 			flowPrepareSigningRequest: {
-				assertBalanceForGasCost: assertBalanceForGasCost ?? false,
-				assertBalanceForTransferAmount: assertBalanceForTransferAmount ?? false
+				assertBalanceForGasCost: assertBalanceForGasCost ?? true,
+				assertBalanceForTransferAmount: assertBalanceForTransferAmount ?? true
 			},
 			xDynamicFlowSessionToken: sessionToken
 		}),