@dynamic-labs-sdk/client 1.28.0 → 1.29.0

package/dist/{migrateFromFireblocks-BM6Iaii-.esm.js.map → migrateFromFireblocks-DbTnFE38.esm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"migrateFromFireblocks-BM6Iaii-.esm.js","names":["refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgD,UAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAAC,qBAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;ACgCT,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAAS,kBAAkB,KACgB;CAC3C,MAAM,YAAY,mBAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,sBAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAK,qBAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMA,sBAAY,OAAO;AAEzB,QAAO"}
+{"version":3,"file":"migrateFromFireblocks-DbTnFE38.esm.js","names":["refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgD,UAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAAC,qBAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;ACgCT,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAAS,kBAAkB,KACgB;CAC3C,MAAM,YAAY,mBAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,sBAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAK,qBAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMA,sBAAY,OAAO;AAEzB,QAAO"}

package/dist/{migrateFromFireblocks-Dg6igmRk.cjs → migrateFromFireblocks-Dyh2dGWB.cjs}

@@ -1,5 +1,5 @@
-const require_updateAuthFromVerifyResponse = require('./updateAuthFromVerifyResponse-DD_rZDrQ.cjs');
-const require_isDynamicWaasEnabled = require('./isDynamicWaasEnabled-DnDhv_Uj.cjs');
+const require_updateAuthFromVerifyResponse = require('./updateAuthFromVerifyResponse-CePaJzru.cjs');
+const require_isDynamicWaasEnabled = require('./isDynamicWaasEnabled-DT4jhqkC.cjs');
 
 //#region src/errors/NotWaasWalletProviderError.ts
 var NotWaasWalletProviderError = class extends require_updateAuthFromVerifyResponse.BaseError {
@@ -79,4 +79,4 @@ Object.defineProperty(exports, 'migrateFromFireblocks', {
     return migrateFromFireblocks;
   }
 });
-//# sourceMappingURL=migrateFromFireblocks-Dg6igmRk.cjs.map
+//# sourceMappingURL=migrateFromFireblocks-Dyh2dGWB.cjs.map

package/dist/{migrateFromFireblocks-Dg6igmRk.cjs.map → migrateFromFireblocks-Dyh2dGWB.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"migrateFromFireblocks-Dg6igmRk.cjs","names":["BaseError","getWalletProviderFromWalletAccount","isWaasWalletProvider","NotWaasWalletAccountError","getDefaultClient","getWalletProviders","NoWalletProviderFoundError","DYNAMIC_WAAS_METADATA","isWaasWalletProvider","refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgDA,+CAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiBC,wEACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAACC,0DAAqB,eAAe,CACvC,OAAM,IAAIC,uDAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;ACgCT,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAASC,uDAAkB,KACgB;CAC3C,MAAM,YAAYC,wDAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAIC,gEAA2B,EACnC,mBAAmBC,2DAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAKC,0DAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMC,mDAAY,OAAO;AAEzB,QAAO"}
+{"version":3,"file":"migrateFromFireblocks-Dyh2dGWB.cjs","names":["BaseError","getWalletProviderFromWalletAccount","isWaasWalletProvider","NotWaasWalletAccountError","getDefaultClient","getWalletProviders","NoWalletProviderFoundError","DYNAMIC_WAAS_METADATA","isWaasWalletProvider","refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgDA,+CAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiBC,wEACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAACC,0DAAqB,eAAe,CACvC,OAAM,IAAIC,uDAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;ACgCT,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAASC,uDAAkB,KACgB;CAC3C,MAAM,YAAYC,wDAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAIC,gEAA2B,EACnC,mBAAmBC,2DAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAKC,0DAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMC,mDAAY,OAAO;AAEzB,QAAO"}

package/dist/modules/auth/decodeJwt/decodeJwt.d.ts

@@ -3,6 +3,7 @@ export type JwtPayload = {
     exp: number;
     iat: number;
     scope: string;
+    sessionPublicKey?: string;
     singleUse?: boolean;
     sub: string;
 };
@@ -21,7 +22,7 @@ export type JwtPayload = {
  * const payload = decodeJwt(jwt);
  * // Returns: { scopes: ['wallet:export'], exp: 1234567890, ... }
  * ```
-  * @notInstrumented
+ * @notInstrumented
  */
 export declare const decodeJwt: (jwt: string) => JwtPayload;
 //# sourceMappingURL=decodeJwt.d.ts.map

package/dist/modules/auth/decodeJwt/decodeJwt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decodeJwt.d.ts","sourceRoot":"","sources":["../../../../src/modules/auth/decodeJwt/decodeJwt.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AAEH,eAAO,MAAM,SAAS,QAAS,MAAM,KAAG,UA4BvC,CAAC"}
+{"version":3,"file":"decodeJwt.d.ts","sourceRoot":"","sources":["../../../../src/modules/auth/decodeJwt/decodeJwt.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AAEH,eAAO,MAAM,SAAS,QAAS,MAAM,KAAG,UA4BvC,CAAC"}

package/dist/modules/auth/logoutReason.d.ts

@@ -4,5 +4,5 @@
  * Surfaced in Datadog logout events so we can understand why users are being
  * signed out.
  */
-export type LogoutReason = 'user-intent' | 'token-expired' | 'keychain-migration-failed' | 'keychain-key-missing' | 'session-refresh-unauthorized' | 'user-refresh-failed' | 'user-deleted' | 'device-revoked' | 'all-devices-revoked' | 'business-account-ownership-transferred';
+export type LogoutReason = 'user-intent' | 'token-expired' | 'keychain-migration-failed' | 'keychain-key-missing' | 'session-public-key-mismatch' | 'session-refresh-unauthorized' | 'user-refresh-failed' | 'user-deleted' | 'device-revoked' | 'all-devices-revoked' | 'business-account-ownership-transferred';
 //# sourceMappingURL=logoutReason.d.ts.map

package/dist/modules/auth/logoutReason.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logoutReason.d.ts","sourceRoot":"","sources":["../../../src/modules/auth/logoutReason.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,eAAe,GACf,2BAA2B,GAC3B,sBAAsB,GACtB,8BAA8B,GAC9B,qBAAqB,GACrB,cAAc,GACd,gBAAgB,GAChB,qBAAqB,GACrB,wCAAwC,CAAC"}
+{"version":3,"file":"logoutReason.d.ts","sourceRoot":"","sources":["../../../src/modules/auth/logoutReason.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,eAAe,GACf,2BAA2B,GAC3B,sBAAsB,GACtB,6BAA6B,GAC7B,8BAA8B,GAC9B,qBAAqB,GACrB,cAAc,GACd,gBAAgB,GAChB,qBAAqB,GACrB,wCAAwC,CAAC"}

package/dist/modules/initializeClient/initializeClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initializeClient.d.ts","sourceRoot":"","sources":["../../../src/modules/initializeClient/initializeClient.ts"],"names":[],"mappings":"AAwBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,gBAAgB,mEAqK5B,CAAC"}
+{"version":3,"file":"initializeClient.d.ts","sourceRoot":"","sources":["../../../src/modules/initializeClient/initializeClient.ts"],"names":[],"mappings":"AAyBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,gBAAgB,mEAuK5B,CAAC"}

package/dist/modules/initializeClient/logoutIfSessionPublicKeyMismatched/logoutIfSessionPublicKeyMismatched.d.ts

@@ -0,0 +1,18 @@
+import type { DynamicClient } from '../../../client/types';
+/**
+ * Signs the user out when the local session key no longer matches the
+ * `sessionPublicKey` claim carried by the current token.
+ *
+ * The claim is captured once at sign-in and carried forward unchanged on
+ * every token refresh (it is not re-derived from the client's current
+ * session key). If the local session key is regenerated afterwards — e.g. a
+ * re-init racing a token refresh, or storage being partially cleared — every
+ * subsequent request keeps signing with the new key while asserting the
+ * stale claim, and is rejected server-side with `invalid_nonce_signature`
+ * forever, since retrying never re-syncs the claim. Signing out forces a
+ * fresh sign-in, which is the only flow that re-captures the claim from the
+ * client's current key.
+ * @notInstrumented
+ */
+export declare const logoutIfSessionPublicKeyMismatched: (client: DynamicClient) => Promise<void>;
+//# sourceMappingURL=logoutIfSessionPublicKeyMismatched.d.ts.map

package/dist/modules/initializeClient/logoutIfSessionPublicKeyMismatched/logoutIfSessionPublicKeyMismatched.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logoutIfSessionPublicKeyMismatched.d.ts","sourceRoot":"","sources":["../../../../src/modules/initializeClient/logoutIfSessionPublicKeyMismatched/logoutIfSessionPublicKeyMismatched.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kCAAkC,WACrC,aAAa,kBA8BtB,CAAC"}

package/dist/modules/waas/businessAccounts/addBusinessAccountSigner/addBusinessAccountSigner.d.ts

@@ -1,11 +1,11 @@
-import type { WalletAccount } from '../../../wallets/walletAccount';
+import type { WaasWalletAccount } from '../../waas.types';
 import type { BusinessAccountSignerType, TargetIdentity } from '../businessAccounts.types';
 type AddSignerParams = {
     businessAccountId?: string;
     password?: string;
     signerType?: BusinessAccountSignerType;
     targetIdentity: TargetIdentity;
-    walletAccount: WalletAccount;
+    walletAccount: WaasWalletAccount;
     walletId?: string;
 };
 /**

package/dist/modules/waas/businessAccounts/addBusinessAccountSigner/addBusinessAccountSigner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"addBusinessAccountSigner.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/addBusinessAccountSigner/addBusinessAccountSigner.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAKpE,OAAO,KAAK,EAEV,yBAAyB,EACzB,cAAc,EACf,MAAM,2BAA2B,CAAC;AAEnC,KAAK,eAAe,GAAG;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,wBAAwB,0FAQhC,eAAe,2DAEjB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CA0DhC,CAAC"}
+{"version":3,"file":"addBusinessAccountSigner.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/addBusinessAccountSigner/addBusinessAccountSigner.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAEV,yBAAyB,EACzB,cAAc,EACf,MAAM,2BAA2B,CAAC;AAEnC,KAAK,eAAe,GAAG;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,wBAAwB,0FAQhC,eAAe,2DAEjB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CA0DhC,CAAC"}

package/dist/modules/waas/getWalletAccountShareSets/getWalletAccountShareSets.d.ts

@@ -0,0 +1,27 @@
+import type { WaasShareSet, WaasWalletShareSetType } from '@dynamic-labs/sdk-api-core';
+import type { WaasWalletAccount } from '../waas.types';
+type GetWalletAccountShareSetsParams = {
+    walletAccount: WaasWalletAccount;
+};
+export type WalletAccountOwnShareSet = {
+    shareSetId: string;
+    shareSetType?: WaasWalletShareSetType;
+};
+export type WalletAccountShareSets = {
+    /** Other active share sets on the same wallet (e.g. a delegated share set); empty when there are none. */
+    others: WaasShareSet[];
+    /** This wallet account's own share set — the one this auth principal signs with. Undefined when the account carries no share set data. */
+    own?: WalletAccountOwnShareSet;
+};
+/**
+ * No network request. Share set ids rotate on refresh/reshare (stale ids are
+ * rejected server-side), so re-read rather than cache; non-WaaS accounts
+ * return `{ own: undefined, others: [] }` instead of throwing.
+ *
+ * @param params.walletAccount - The WaaS wallet account whose share sets to read.
+ * @returns The account's own share set (if any) and the wallet's other active share sets.
+ * @notInstrumented
+ */
+export declare const getWalletAccountShareSets: ({ walletAccount, }: GetWalletAccountShareSetsParams) => WalletAccountShareSets;
+export {};
+//# sourceMappingURL=getWalletAccountShareSets.d.ts.map

package/dist/modules/waas/getWalletAccountShareSets/getWalletAccountShareSets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getWalletAccountShareSets.d.ts","sourceRoot":"","sources":["../../../../src/modules/waas/getWalletAccountShareSets/getWalletAccountShareSets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEvF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,KAAK,+BAA+B,GAAG;IACrC,aAAa,EAAE,iBAAiB,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,0GAA0G;IAC1G,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,0IAA0I;IAC1I,GAAG,CAAC,EAAE,wBAAwB,CAAC;CAChC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,uBAEnC,+BAA+B,KAAG,sBAYpC,CAAC"}

package/dist/modules/waas/getWalletAccountShareSets/index.d.ts

@@ -0,0 +1,3 @@
+export { getWalletAccountShareSets } from './getWalletAccountShareSets';
+export type { WalletAccountOwnShareSet, WalletAccountShareSets, } from './getWalletAccountShareSets';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/getWalletAccountShareSets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/waas/getWalletAccountShareSets/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,YAAY,EACV,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC"}

package/dist/modules/waas/injectWaasVerifiedCredentialFields/injectWaasVerifiedCredentialFields.d.ts

@@ -0,0 +1,25 @@
+import type { JwtVerifiedCredential, WaasShareSet, WaasWalletShareSetType } from '@dynamic-labs/sdk-api-core';
+import type { WalletAccount } from '../../wallets/walletAccount';
+type InjectWaasVerifiedCredentialFieldsParams = {
+    verifiedCredential: JwtVerifiedCredential;
+    walletAccount: WalletAccount;
+};
+/**
+ * Layers the WaaS-only fields (business account ownership, share-set
+ * identity) onto an otherwise-generic `WalletAccount`, read from the same
+ * verified credential it was built from. Isolated into its own function,
+ * called on top of the assembled `WalletAccount`, rather than inlined into
+ * `convertVerifiedCredentialToWalletAccount` — that keeps the WaaS-only
+ * shape of the augmented result out of the wallets module, which builds
+ * only the generic `WalletAccount`.
+ *
+ * @notInstrumented
+ */
+export declare const injectWaasVerifiedCredentialFields: ({ verifiedCredential, walletAccount, }: InjectWaasVerifiedCredentialFieldsParams) => WalletAccount & {
+    businessAccountId?: string;
+    otherShareSets?: WaasShareSet[];
+    shareSetId?: string;
+    shareSetType?: WaasWalletShareSetType;
+};
+export {};
+//# sourceMappingURL=injectWaasVerifiedCredentialFields.d.ts.map

package/dist/modules/waas/injectWaasVerifiedCredentialFields/injectWaasVerifiedCredentialFields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injectWaasVerifiedCredentialFields.d.ts","sourceRoot":"","sources":["../../../../src/modules/waas/injectWaasVerifiedCredentialFields/injectWaasVerifiedCredentialFields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,YAAY,EACZ,sBAAsB,EACvB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,KAAK,wCAAwC,GAAG;IAC9C,kBAAkB,EAAE,qBAAqB,CAAC;IAC1C,aAAa,EAAE,aAAa,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kCAAkC,2CAG5C,wCAAwC,KAAG,aAAa,GAAG;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,sBAAsB,CAAC;CAStC,CAAC"}

package/dist/modules/waas/policies/applyPolicyLayerBatch/applyPolicyLayerBatch.d.ts

@@ -0,0 +1,18 @@
+import { type WaasPolicyLayerResponse, type WaasPolicyLayerRuleOperation } from '@dynamic-labs/sdk-api-core';
+import type { DynamicClient } from '../../../../client/types';
+import type { ResolvedPolicyScope } from '../resolvePolicyScope';
+type ApplyPolicyLayerBatchParams = {
+    operations: WaasPolicyLayerRuleOperation[];
+    resolvedScope: ResolvedPolicyScope;
+};
+/**
+ * Applies a batch of rule operations to the policy layer a
+ * {@link ResolvedPolicyScope} points at, atomically in one enclave cycle.
+ * Shared by {@link createPolicy} and {@link removePolicyRules} so the
+ * account-vs-wallet-vs-signer branch is written once.
+ *
+ * @notInstrumented
+ */
+export declare const applyPolicyLayerBatch: ({ operations, resolvedScope }: ApplyPolicyLayerBatchParams, client: DynamicClient) => Promise<WaasPolicyLayerResponse>;
+export {};
+//# sourceMappingURL=applyPolicyLayerBatch.d.ts.map

package/dist/modules/waas/policies/applyPolicyLayerBatch/applyPolicyLayerBatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyPolicyLayerBatch.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/applyPolicyLayerBatch/applyPolicyLayerBatch.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EAGlC,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAG9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,KAAK,2BAA2B,GAAG;IACjC,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC3C,aAAa,EAAE,mBAAmB,CAAC;CACpC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,kCACD,2BAA2B,UAClD,aAAa,KACpB,OAAO,CAAC,uBAAuB,CA4CjC,CAAC"}

package/dist/modules/waas/policies/applyPolicyLayerBatch/index.d.ts

@@ -0,0 +1,2 @@
+export { applyPolicyLayerBatch } from './applyPolicyLayerBatch';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/applyPolicyLayerBatch/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/applyPolicyLayerBatch/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/modules/waas/policies/buildAllowAddressesRule/buildAllowAddressesRule.d.ts

@@ -0,0 +1,10 @@
+import { type WaasPolicyRule } from '@dynamic-labs/sdk-api-core';
+import type { BuildRuleParams } from '../policies.types';
+/**
+ * Builds the `allowAddresses` rule, absorbing a sibling
+ * `maxAmountPerTransaction` onto the same rule instead of letting it emit
+ * its own — see `buildMaxAmountPerTransactionRule`.
+ * @notInstrumented
+ */
+export declare const buildAllowAddressesRule: ({ context: { chain, chainIds }, rules, }: BuildRuleParams) => WaasPolicyRule | undefined;
+//# sourceMappingURL=buildAllowAddressesRule.d.ts.map

package/dist/modules/waas/policies/buildAllowAddressesRule/buildAllowAddressesRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildAllowAddressesRule.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildAllowAddressesRule/buildAllowAddressesRule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,6CAGjC,eAAe,KAAG,cAAc,GAAG,SAcrC,CAAC"}

package/dist/modules/waas/policies/buildAllowAddressesRule/index.d.ts

@@ -0,0 +1,2 @@
+export { buildAllowAddressesRule } from './buildAllowAddressesRule';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/buildAllowAddressesRule/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildAllowAddressesRule/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/modules/waas/policies/buildAllowPolicyRule/buildAllowPolicyRule.d.ts

@@ -0,0 +1,11 @@
+import { type WaasPolicyRule } from '@dynamic-labs/sdk-api-core';
+import type { PolicyRuleInput } from '../policies.types';
+/**
+ * Builds a policy rule that permits the described action.
+ *
+ * @param rule - The rule fields (name, chain, and any targeting/limit fields).
+ * @returns A `WaasPolicyRule` with `ruleType` set to `allow`.
+ * @notInstrumented
+ */
+export declare const buildAllowPolicyRule: (rule: PolicyRuleInput) => WaasPolicyRule;
+//# sourceMappingURL=buildAllowPolicyRule.d.ts.map

package/dist/modules/waas/policies/buildAllowPolicyRule/buildAllowPolicyRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildAllowPolicyRule.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildAllowPolicyRule/buildAllowPolicyRule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,SAAU,eAAe,KAAG,cAG3D,CAAC"}

package/dist/modules/waas/policies/buildAllowPolicyRule/index.d.ts

@@ -0,0 +1,2 @@
+export { buildAllowPolicyRule } from './buildAllowPolicyRule';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/buildAllowPolicyRule/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildAllowPolicyRule/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/modules/waas/policies/buildBlockExportRule/buildBlockExportRule.d.ts

@@ -0,0 +1,11 @@
+import { type WaasPolicyRule } from '@dynamic-labs/sdk-api-core';
+import type { BuildRuleParams } from '../policies.types';
+/**
+ * Builds the `blockExport` rule. `deny`, not `allow`: an addressless
+ * allow-rule normalizes to an empty allowed-set, denying every transaction.
+ * `chain`/`chainIds` are stamped for consistency but the enforcement of a
+ * `blockExport` `operationRestrictions` rule is wallet-wide, ignoring them.
+ * @notInstrumented
+ */
+export declare const buildBlockExportRule: ({ context: { chain, chainIds }, rules, }: BuildRuleParams) => WaasPolicyRule | undefined;
+//# sourceMappingURL=buildBlockExportRule.d.ts.map

package/dist/modules/waas/policies/buildBlockExportRule/buildBlockExportRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildBlockExportRule.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildBlockExportRule/buildBlockExportRule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,6CAG9B,eAAe,KAAG,cAAc,GAAG,SAUrC,CAAC"}

package/dist/modules/waas/policies/buildBlockExportRule/index.d.ts

@@ -0,0 +1,2 @@
+export { buildBlockExportRule } from './buildBlockExportRule';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/buildBlockExportRule/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildBlockExportRule/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/modules/waas/policies/buildDenyAddressesRule/buildDenyAddressesRule.d.ts

@@ -0,0 +1,8 @@
+import { type WaasPolicyRule } from '@dynamic-labs/sdk-api-core';
+import type { BuildRuleParams } from '../policies.types';
+/**
+ * Builds the `denyAddresses` rule. Independent of `allowAddresses`.
+ * @notInstrumented
+ */
+export declare const buildDenyAddressesRule: ({ context: { chain, chainIds }, rules, }: BuildRuleParams) => WaasPolicyRule | undefined;
+//# sourceMappingURL=buildDenyAddressesRule.d.ts.map

package/dist/modules/waas/policies/buildDenyAddressesRule/buildDenyAddressesRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildDenyAddressesRule.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildDenyAddressesRule/buildDenyAddressesRule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,6CAGhC,eAAe,KAAG,cAAc,GAAG,SAWrC,CAAC"}

package/dist/modules/waas/policies/buildDenyAddressesRule/index.d.ts

@@ -0,0 +1,2 @@
+export { buildDenyAddressesRule } from './buildDenyAddressesRule';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/buildDenyAddressesRule/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildDenyAddressesRule/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/modules/waas/policies/buildDenyPolicyRule/buildDenyPolicyRule.d.ts

@@ -0,0 +1,11 @@
+import { type WaasPolicyRule } from '@dynamic-labs/sdk-api-core';
+import type { PolicyRuleInput } from '../policies.types';
+/**
+ * Builds a policy rule that blocks the described action.
+ *
+ * @param rule - The rule fields (name, chain, and any targeting/limit fields).
+ * @returns A `WaasPolicyRule` with `ruleType` set to `deny`.
+ * @notInstrumented
+ */
+export declare const buildDenyPolicyRule: (rule: PolicyRuleInput) => WaasPolicyRule;
+//# sourceMappingURL=buildDenyPolicyRule.d.ts.map

package/dist/modules/waas/policies/buildDenyPolicyRule/buildDenyPolicyRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildDenyPolicyRule.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildDenyPolicyRule/buildDenyPolicyRule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,SAAU,eAAe,KAAG,cAG1D,CAAC"}

package/dist/modules/waas/policies/buildDenyPolicyRule/index.d.ts

@@ -0,0 +1,2 @@
+export { buildDenyPolicyRule } from './buildDenyPolicyRule';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/buildDenyPolicyRule/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildDenyPolicyRule/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/modules/waas/policies/buildMaxAmountPerTransactionRule/buildMaxAmountPerTransactionRule.d.ts

@@ -0,0 +1,10 @@
+import { type WaasPolicyRule } from '@dynamic-labs/sdk-api-core';
+import type { BuildRuleParams } from '../policies.types';
+/**
+ * Builds the standalone `maxAmountPerTransaction` rule. Only fires when
+ * `allowAddresses` didn't already absorb this cap onto its own rule. `deny`
+ * for the same reason as `blockExport`'s builder.
+ * @notInstrumented
+ */
+export declare const buildMaxAmountPerTransactionRule: ({ context: { chain, chainIds }, rules, }: BuildRuleParams) => WaasPolicyRule | undefined;
+//# sourceMappingURL=buildMaxAmountPerTransactionRule.d.ts.map

package/dist/modules/waas/policies/buildMaxAmountPerTransactionRule/buildMaxAmountPerTransactionRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildMaxAmountPerTransactionRule.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildMaxAmountPerTransactionRule/buildMaxAmountPerTransactionRule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,6CAG1C,eAAe,KAAG,cAAc,GAAG,SAYrC,CAAC"}

package/dist/modules/waas/policies/buildMaxAmountPerTransactionRule/index.d.ts

@@ -0,0 +1,2 @@
+export { buildMaxAmountPerTransactionRule } from './buildMaxAmountPerTransactionRule';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/buildMaxAmountPerTransactionRule/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildMaxAmountPerTransactionRule/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC"}

package/dist/modules/waas/policies/buildOperationForExistingRule/buildOperationForExistingRule.d.ts

@@ -0,0 +1,26 @@
+import { type WaasChainEnum, type WaasPolicyLayerRuleOperation, type WaasPolicyRule } from '@dynamic-labs/sdk-api-core';
+import type { PolicyRules } from '../policies.types';
+type BuildOperationForExistingRuleParams = {
+    chain: WaasChainEnum;
+    chainIds: number[];
+    existingRule: WaasPolicyRule;
+    rules: (keyof PolicyRules)[];
+};
+/**
+ * Builds the operation to remove or rebuild `existingRule` when the
+ * caller's requested keys touch it — outright removal when every key it
+ * covers is being removed, or an upsert of the rule rebuilt from its
+ * remaining keys when only some are. Returns undefined when none of the
+ * requested keys touch this rule, when it's outside the sugar vocabulary,
+ * or when it can't be identified without a `ruleId`.
+ *
+ * @param params.chain - The chain the rule to remove/rebuild applies to.
+ * @param params.chainIds - The chain ids the rule to remove/rebuild applies to.
+ * @param params.existingRule - The existing layer rule to check.
+ * @param params.rules - The sugar keys to remove.
+ * @returns The operation for this rule, or undefined when it isn't touched.
+ * @notInstrumented
+ */
+export declare const buildOperationForExistingRule: ({ chain, chainIds, existingRule, rules, }: BuildOperationForExistingRuleParams) => WaasPolicyLayerRuleOperation | undefined;
+export {};
+//# sourceMappingURL=buildOperationForExistingRule.d.ts.map

package/dist/modules/waas/policies/buildOperationForExistingRule/buildOperationForExistingRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildOperationForExistingRule.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildOperationForExistingRule/buildOperationForExistingRule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,4BAA4B,EAEjC,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,KAAK,mCAAmC,GAAG;IACzC,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,EAAE,cAAc,CAAC;IAC7B,KAAK,EAAE,CAAC,MAAM,WAAW,CAAC,EAAE,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,6BAA6B,8CAKvC,mCAAmC,KAAG,4BAA4B,GAAG,SA6CvE,CAAC"}

package/dist/modules/waas/policies/buildOperationForExistingRule/index.d.ts

@@ -0,0 +1,2 @@
+export { buildOperationForExistingRule } from './buildOperationForExistingRule';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/buildOperationForExistingRule/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildOperationForExistingRule/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/modules/waas/policies/buildOperationsForRule/buildOperationsForRule.d.ts

@@ -0,0 +1,24 @@
+import { type WaasPolicyLayerRuleOperation, type WaasPolicyRule } from '@dynamic-labs/sdk-api-core';
+import type { PolicyRules } from '../policies.types';
+type BuildOperationsForRuleParams = {
+    builtRule: WaasPolicyRule;
+    consumedRuleIds: Set<string>;
+    existingRulesInScope: WaasPolicyRule[];
+    rules: PolicyRules;
+};
+/**
+ * Upserts `builtRule` onto the existing rule it reuses (if any), and
+ * removes every rule that rule superseded. Mutates `consumedRuleIds` so a
+ * later call for a different built rule never reuses or removes the same
+ * existing rule twice.
+ *
+ * @param params.builtRule - The newly built rule to turn into batch operations.
+ * @param params.consumedRuleIds - `ruleId`s already reused or removed for a prior built rule this call.
+ * @param params.existingRulesInScope - The layer's rules already narrowed to the target chain scope.
+ * @param params.rules - The caller's requested {@link PolicyRules} sugar map.
+ * @returns The batch operations for this built rule — one upsert, plus a remove per superseded rule.
+ * @notInstrumented
+ */
+export declare const buildOperationsForRule: ({ builtRule, consumedRuleIds, existingRulesInScope, rules, }: BuildOperationsForRuleParams) => WaasPolicyLayerRuleOperation[];
+export {};
+//# sourceMappingURL=buildOperationsForRule.d.ts.map

package/dist/modules/waas/policies/buildOperationsForRule/buildOperationsForRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildOperationsForRule.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildOperationsForRule/buildOperationsForRule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,4BAA4B,EAEjC,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,KAAK,4BAA4B,GAAG;IAClC,SAAS,EAAE,cAAc,CAAC;IAC1B,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,oBAAoB,EAAE,cAAc,EAAE,CAAC;IACvC,KAAK,EAAE,WAAW,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,sBAAsB,iEAKhC,4BAA4B,KAAG,4BAA4B,EAgC7D,CAAC"}

package/dist/modules/waas/policies/buildOperationsForRule/index.d.ts

@@ -0,0 +1,2 @@
+export { buildOperationsForRule } from './buildOperationsForRule';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/buildOperationsForRule/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildOperationsForRule/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/modules/waas/policies/buildValueLimit/buildValueLimit.d.ts

@@ -0,0 +1,10 @@
+import type { PolicyRuleMaxAmountPerTransaction } from '../policies.types';
+/**
+ * Turns a {@link PolicyRuleMaxAmountPerTransaction} into the `valueLimit` shape a rule stores it as.
+ * @notInstrumented
+ */
+export declare const buildValueLimit: ({ amount, asset, }: PolicyRuleMaxAmountPerTransaction) => {
+    asset: string | undefined;
+    maxPerCall: string;
+};
+//# sourceMappingURL=buildValueLimit.d.ts.map

package/dist/modules/waas/policies/buildValueLimit/buildValueLimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildValueLimit.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildValueLimit/buildValueLimit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,mBAAmB,CAAC;AAE3E;;;GAGG;AACH,eAAO,MAAM,eAAe,uBAGzB,iCAAiC;;;CAGlC,CAAC"}

package/dist/modules/waas/policies/buildValueLimit/index.d.ts

@@ -0,0 +1,2 @@
+export { buildValueLimit } from './buildValueLimit';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/buildValueLimit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/buildValueLimit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/modules/waas/policies/createPolicy/createPolicy.d.ts

@@ -0,0 +1,39 @@
+import { type WaasChainEnum, type WaasPolicyLayerResponse } from '@dynamic-labs/sdk-api-core';
+import type { DynamicClient } from '../../../../client/types';
+import type { PolicyRules, PolicyScope } from '../policies.types';
+type CreatePolicyParams = {
+    chain: WaasChainEnum;
+    chainIds?: number[];
+    rules: PolicyRules;
+    scope: PolicyScope;
+};
+/**
+ * Creates or updates a wallet's, signer's, or business account's policy rules from the
+ * {@link PolicyRules} sugar map, in one atomic `batch` PATCH. Each key in
+ * `rules` maps to at most one underlying rule, so calling this twice with
+ * the same map updates that rule in place instead of duplicating it.
+ *
+ * Known race: no ETag / optimistic-concurrency check — concurrent calls for
+ * the same scope can both read-then-write and duplicate a rule.
+ *
+ * When more than one existing rule matches the same sugar key(s), only
+ * rules being absorbed into the newly built rule (i.e. no other match
+ * claims the same key) are removed. Two rules that duplicate the same key
+ * (e.g. two hand-authored `denyAddresses` rules for this chain scope) are
+ * left as-is rather than one being silently deleted — this call updates the
+ * lexicographically-smallest-`ruleId` match in place and leaves the rest
+ * untouched. A caller repeating this call will not converge on a single
+ * rule; the duplicate has to be removed by hand.
+ *
+ * @param params.scope - Which policy layer to update — see {@link resolvePolicyScope}.
+ * @param params.chain - The chain the rules apply to.
+ * @param params.chainIds - The chain ids the rules apply to; omit for a wildcard rule that matches every chain id of `chain`.
+ * @param params.rules - The desired rules, as a {@link PolicyRules} sugar map.
+ * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+ * @returns The policy layer as it stands after the batch is applied.
+ * @throws When `rules` produces no recognized keys, or via {@link resolvePolicyScope}'s scope-resolution errors.
+ * @notInstrumented
+ */
+export declare const createPolicy: ({ chain, chainIds, rules, scope }: CreatePolicyParams, client?: DynamicClient) => Promise<WaasPolicyLayerResponse>;
+export {};
+//# sourceMappingURL=createPolicy.d.ts.map

package/dist/modules/waas/policies/createPolicy/createPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createPolicy.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/createPolicy/createPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAE7B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAO9D,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIlE,KAAK,kBAAkB,GAAG;IACxB,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,YAAY,sCACY,kBAAkB,WAC7C,aAAa,KACpB,OAAO,CAAC,uBAAuB,CA8CjC,CAAC"}

package/dist/modules/waas/policies/createPolicy/index.d.ts

@@ -0,0 +1,2 @@
+export { createPolicy } from './createPolicy';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/policies/createPolicy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/policies/createPolicy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC"}