@dynamic-labs-sdk/client 1.3.0 → 1.4.0

package/dist/index.cjs

@@ -1,8 +1,8 @@
-const require_getNetworkProviderFromNetworkId = require('./getNetworkProviderFromNetworkId-BA0CHZzu.cjs');
-const require_InvalidParamError = require('./InvalidParamError-DQvZQdQ9.cjs');
-const require_getVerifiedCredentialForWalletAccount = require('./getVerifiedCredentialForWalletAccount-DSSDwOyq.cjs');
-const require_NotWaasWalletAccountError = require('./NotWaasWalletAccountError-Ciq7b-Y6.cjs');
-const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-CMClgbT0.cjs');
+const require_getNetworkProviderFromNetworkId = require('./getNetworkProviderFromNetworkId-szJOsbQN.cjs');
+const require_InvalidParamError = require('./InvalidParamError-DEmLKJKZ.cjs');
+const require_getVerifiedCredentialForWalletAccount = require('./getVerifiedCredentialForWalletAccount-B46O0B48.cjs');
+const require_NotWaasWalletAccountError = require('./NotWaasWalletAccountError-BZsBHRQe.cjs');
+const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-6N6JB7wa.cjs');
 let _dynamic_labs_sdk_assert_package_version = require("@dynamic-labs-sdk/assert-package-version");
 let _dynamic_labs_sdk_api_core = require("@dynamic-labs/sdk-api-core");
 let zod_mini = require("zod/mini");
@@ -27,6 +27,36 @@ const stateChangeEvents = {
 	user: "userChanged"
 };
 
+//#endregion
+//#region src/utils/appendConnectionUriToDeeplink/appendConnectionUriToDeeplink.ts
+/**
+* Appends a wallet connection URI to a deeplink URL.
+*
+* Generic across URI-deeplink connection options — works for both
+* WalletConnect pairing URIs and MetaMask SDK URIs. Determines the
+* appropriate query parameter separator based on whether the deeplink
+* already contains query parameters.
+*
+* @param params.deeplinkUrl - The base deeplink URL (e.g., `walletapp://wc` or `walletapp://wc?param=value`).
+* @param params.connectionUri - The connection URI to append.
+* @returns The deeplink URL with the connection URI appended as a query parameter.
+*
+* @example
+* ```ts
+* appendConnectionUriToDeeplink({ deeplinkUrl: 'walletapp://wc', connectionUri: 'wc:123-456' })
+* // Returns: 'walletapp://wc?uri=wc%3A123-456'
+*
+* appendConnectionUriToDeeplink({ deeplinkUrl: 'walletapp://wc?param=value', connectionUri: 'wc:123-456' })
+* // Returns: 'walletapp://wc?param=value&uri=wc%3A123-456'
+* ```
+* @not-instrumented
+*/
+const appendConnectionUriToDeeplink = ({ connectionUri, deeplinkUrl }) => {
+	const url = new URL(deeplinkUrl);
+	url.searchParams.set("uri", connectionUri);
+	return url.href;
+};
+
 //#endregion
 //#region src/utils/getNonce/prefetchNoncesIfNeeded/prefetchNoncesIfNeeded.ts
 /** @not-instrumented */
@@ -628,10 +658,13 @@ const connectLoggerToInstrumentation = ({ environmentId, extensions, instrumenta
 		const { token, user } = state.get();
 		instrumentation.log({
 			environmentId,
-			parameters: {
-				args,
-				message
-			},
+			parameters: require_InvalidParamError.scrubParameters({
+				piiFields: instrumentation.config.piiFields,
+				value: {
+					args,
+					message
+				}
+			}),
 			registeredExtensionKeys: Array.from(extensions),
 			sdkSessionId,
 			sdkVersion,
@@ -1543,6 +1576,7 @@ const __checkStepUpAuth_wrapped = require_InvalidParamError.instrumentFunction({
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the assertion response containing the elevated access token.
 * @instrumented
+* @redact-params
 */
 const requestExternalAuthElevatedToken = async ({ externalJwt }, client = require_InvalidParamError.getDefaultClient()) => {
 	const core = require_InvalidParamError.getCore(client);
@@ -1570,7 +1604,8 @@ const __requestExternalAuthElevatedToken_wrapped = require_InvalidParamError.ins
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -1722,6 +1757,7 @@ const serverRegisterPasskey = async ({ registration, createMfaToken }, client) =
 * @returns A promise that resolves to the registration response.
 * @throws NoWebAuthNSupportError If WebAuthn is not supported by the browser.
 * @instrumented
+* @redact-params
 */
 const registerPasskey = async ({ createMfaToken } = {}, client = require_InvalidParamError.getDefaultClient()) => {
 	const core = require_InvalidParamError.getCore(client);
@@ -1744,7 +1780,8 @@ const __registerPasskey_wrapped = require_InvalidParamError.instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -1789,6 +1826,7 @@ const serverSigninPasskey = async ({ authentication, createMfaToken }, client) =
 * @returns A promise that resolves to the authentication response.
 * @throws NoWebAuthNSupportError If WebAuthn is not supported by the browser.
 * @instrumented
+* @redact-params
 */
 const signInWithPasskey = async ({ relatedOriginRpId } = {}, client = require_InvalidParamError.getDefaultClient()) => {
 	const core = require_InvalidParamError.getCore(client);
@@ -1808,7 +1846,8 @@ const __signInWithPasskey_wrapped = require_InvalidParamError.instrumentFunction
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -2250,6 +2289,7 @@ const getPrimaryWalletAccount = (client = require_InvalidParamError.getDefaultCl
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the verify response.
 * @instrumented
+* @redact-params
 */
 const unlinkSocialAccount = async ({ verifiedCredentialId }, client = require_InvalidParamError.getDefaultClient()) => {
 	const core = require_InvalidParamError.getCore(client);
@@ -2275,7 +2315,8 @@ const __unlinkSocialAccount_wrapped = require_InvalidParamError.instrumentFuncti
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -2357,6 +2398,52 @@ const createCheckoutApiClient = async ({ transactionId }, client) => {
 	};
 };
 
+//#endregion
+//#region src/modules/checkout/utils/clearCheckoutSessionToken/clearCheckoutSessionToken.ts
+/**
+* Removes the locally stored checkout session token for the given transaction.
+*
+* The checkout session token is the anonymous credential that authorizes
+* mutations to a single in-flight checkout transaction. Once the transaction
+* has reached a terminal state (cancelled, expired, failed, completed) it can
+* no longer be advanced, and the token is dead weight that should not be
+* persisted in browser storage — leaving it around lets a later XSS payload
+* exfiltrate a credential with no further use, and it can also confuse the
+* SDK on subsequent loads into believing an active session exists.
+*
+* The server-side revocation lives in dashboard-api; this is the SDK-side
+* defense-in-depth.
+*
+* @not-instrumented
+*/
+const clearCheckoutSessionToken = async ({ transactionId }, client) => {
+	await require_InvalidParamError.getCore(client).storage.removeItem(createCheckoutSessionTokenStorageKey(transactionId));
+};
+
+//#endregion
+//#region src/modules/checkout/utils/withCheckoutSessionTokenCleanupOn401/withCheckoutSessionTokenCleanupOn401.ts
+/**
+* Checkout mutation routes are guarded server-side only by session-token
+* validation, so a 401 means the token is dead (revoked, expired, deleted,
+* or invalid). Leaving a dead token in `localStorage` widens the XSS
+* exfiltration surface for no benefit and makes the next SDK load attempt
+* requests that are guaranteed to fail.
+*
+* @not-instrumented
+*/
+const withCheckoutSessionTokenCleanupOn401 = async ({ call, transactionId }, client) => {
+	try {
+		return await call();
+	} catch (error) {
+		if (error instanceof require_InvalidParamError.APIError && error.status === 401) try {
+			await clearCheckoutSessionToken({ transactionId }, client);
+		} catch (cleanupError) {
+			require_InvalidParamError.getCore(client).logger.error("Failed to clear checkout session token after 401", cleanupError);
+		}
+		throw error;
+	}
+};
+
 //#endregion
 //#region src/modules/checkout/attachCheckoutTransactionSource/attachCheckoutTransactionSource.ts
 /**
@@ -2381,12 +2468,15 @@ const attachCheckoutTransactionSource = async (params, client = require_InvalidP
 		attachSourceRequest.fromChainId = params.fromChainId;
 		attachSourceRequest.fromChainName = params.fromChainName;
 	}
-	return apiClient.attachSource({
-		attachSourceRequest,
-		environmentId,
-		transactionId,
-		xDynamicCheckoutSessionToken: sessionToken
-	});
+	return withCheckoutSessionTokenCleanupOn401({
+		call: () => apiClient.attachSource({
+			attachSourceRequest,
+			environmentId,
+			transactionId,
+			xDynamicCheckoutSessionToken: sessionToken
+		}),
+		transactionId
+	}, client);
 };
 const __attachCheckoutTransactionSource_impl = attachCheckoutTransactionSource;
 const __attachCheckoutTransactionSource_wrapped = require_InvalidParamError.instrumentFunction({
@@ -2417,12 +2507,15 @@ const __attachCheckoutTransactionSource_wrapped = require_InvalidParamError.inst
 */
 const broadcastCheckoutTransaction = async ({ transactionId, txHash }, client = require_InvalidParamError.getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
-	return apiClient.recordCheckoutBroadcast({
-		environmentId,
-		recordBroadcastRequest: { txHash },
-		transactionId,
-		xDynamicCheckoutSessionToken: sessionToken
-	});
+	return withCheckoutSessionTokenCleanupOn401({
+		call: () => apiClient.recordCheckoutBroadcast({
+			environmentId,
+			recordBroadcastRequest: { txHash },
+			transactionId,
+			xDynamicCheckoutSessionToken: sessionToken
+		}),
+		transactionId
+	}, client);
 };
 const __broadcastCheckoutTransaction_impl = broadcastCheckoutTransaction;
 const __broadcastCheckoutTransaction_wrapped = require_InvalidParamError.instrumentFunction({
@@ -2449,12 +2542,15 @@ const __broadcastCheckoutTransaction_wrapped = require_InvalidParamError.instrum
 */
 const cancelCheckoutTransaction = async ({ transactionId }, client = require_InvalidParamError.getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
-	const result = await apiClient.cancelCheckoutTransaction({
-		environmentId,
-		transactionId,
-		xDynamicCheckoutSessionToken: sessionToken
-	});
-	await require_InvalidParamError.getCore(client).storage.removeItem(createCheckoutSessionTokenStorageKey(transactionId));
+	const result = await withCheckoutSessionTokenCleanupOn401({
+		call: () => apiClient.cancelCheckoutTransaction({
+			environmentId,
+			transactionId,
+			xDynamicCheckoutSessionToken: sessionToken
+		}),
+		transactionId
+	}, client);
+	await clearCheckoutSessionToken({ transactionId }, client);
 	return result;
 };
 const __cancelCheckoutTransaction_impl = cancelCheckoutTransaction;
@@ -2555,16 +2651,19 @@ const getCheckoutTransaction = async ({ transactionId }, client = require_Invali
 */
 const getCheckoutTransactionQuote = async ({ fromChainId, fromTokenAddress, slippage, transactionId }, client = require_InvalidParamError.getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
-	return apiClient.quoteCheckoutTransaction({
-		environmentId,
-		quoteRequest: {
-			fromChainId,
-			fromTokenAddress,
-			slippage
-		},
-		transactionId,
-		xDynamicCheckoutSessionToken: sessionToken
-	});
+	return withCheckoutSessionTokenCleanupOn401({
+		call: () => apiClient.quoteCheckoutTransaction({
+			environmentId,
+			quoteRequest: {
+				fromChainId,
+				fromTokenAddress,
+				slippage
+			},
+			transactionId,
+			xDynamicCheckoutSessionToken: sessionToken
+		}),
+		transactionId
+	}, client);
 };
 
 //#endregion
@@ -2581,15 +2680,18 @@ const getCheckoutTransactionQuote = async ({ fromChainId, fromTokenAddress, slip
 */
 const prepareCheckoutTransaction = async ({ assertBalanceForGasCost, assertBalanceForTransferAmount, transactionId }, client = require_InvalidParamError.getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
-	return apiClient.prepareCheckoutTransaction({
-		environmentId,
-		prepareSigningRequest: {
-			assertBalanceForGasCost: assertBalanceForGasCost ?? false,
-			assertBalanceForTransferAmount: assertBalanceForTransferAmount ?? false
-		},
-		transactionId,
-		xDynamicCheckoutSessionToken: sessionToken
-	});
+	return withCheckoutSessionTokenCleanupOn401({
+		call: () => apiClient.prepareCheckoutTransaction({
+			environmentId,
+			prepareSigningRequest: {
+				assertBalanceForGasCost: assertBalanceForGasCost ?? false,
+				assertBalanceForTransferAmount: assertBalanceForTransferAmount ?? false
+			},
+			transactionId,
+			xDynamicCheckoutSessionToken: sessionToken
+		}),
+		transactionId
+	}, client);
 };
 const __prepareCheckoutTransaction_impl = prepareCheckoutTransaction;
 const __prepareCheckoutTransaction_wrapped = require_InvalidParamError.instrumentFunction({
@@ -3840,7 +3942,7 @@ const getWalletConnectCatalogWalletByWalletProviderKey = async ({ walletProvider
 //#region src/modules/walletOptionsCatalogue/resolveWalletBookWalletOptionKey/resolveWalletBookWalletOptionKey.ts
 /**
 * Resolves which wallet option (group) a wallet book entry belongs to. Used
-* by the catalogue's wallet-book-driven transformers (`walletConnect`,
+* by the catalogue's wallet-book-driven transformers (URI deeplink,
 * `inAppBrowser`, `installation`) to bucket their emitted options.
 *
 * Wallet book entries inconsistently use `group` / `chainGroup` /
@@ -3995,30 +4097,50 @@ const buildInstallationUrlsByWalletOptionKey = ({ walletBook }) => {
 };
 
 //#endregion
-//#region src/modules/walletOptionsCatalogue/buildWalletConnectOptions/buildWalletConnectOptions.ts
+//#region src/modules/walletOptionsCatalogue/buildUriDeeplinkOptions/resolveUriConnectionType/resolveUriConnectionType.ts
+/**
+* Picks the connection-option `type` discriminator for a wallet-book-
+* derived URI deeplink option. MetaMask is steered toward its own
+* MetaMask SDK URI connection extension (`metamaskSdkUri`) so we route
+* customers off generic WalletConnect for that wallet; every other
+* wallet uses the standard `walletConnect` discriminator.
+*
+* @param params.walletOptionKey - The resolved wallet option key.
+* @returns The connection-option discriminator to emit.
+* @not-instrumented
+*/
+const resolveUriConnectionType = ({ walletOptionKey }) => walletOptionKey === "metamask" ? "metamaskSdkUri" : "walletConnect";
+
+//#endregion
+//#region src/modules/walletOptionsCatalogue/buildUriDeeplinkOptions/buildUriDeeplinkOptions.ts
 /**
-* A wallet only deserves a `walletConnect` catalogue option if it has at
-* least one mobile deeplink — that's the value-add the option provides over
-* the bare WC pairing URI. Wallets that exist in the wallet book but don't
-* expose a deeplink (rare, but present) are silently skipped.
+* A wallet only deserves a URI-deeplink catalogue option if it has at
+* least one mobile deeplink — that's the value-add the option provides
+* over the bare pairing URI. Wallets that exist in the wallet book but
+* don't expose a deeplink (rare, but present) are silently skipped.
 */
 const hasUsableDeeplink = ({ wallet }) => Boolean(wallet.mobile?.native || wallet.mobile?.universal);
 /**
-* Builds the `walletConnect` catalogue options from a fetched wallet book.
+* Builds the URI-deeplink catalogue options from a fetched wallet book.
 * Applies the WalletConnect-specific eligibility filter
 * (`shouldFilterWalletForWalletConnect`) so embedded wallets and entries
 * without `sign_v2` support are excluded — same surface as
 * `getWalletConnectCatalog`.
 *
 * Each emitted option carries the wallet's mobile deeplinks. Customers
-* combine these with their chain's `connectWithWalletConnect<Chain>` URI via
-* `appendWalletConnectUriToDeepLink` to open the wallet's app.
+* combine these with their chain's connection URI via
+* `appendConnectionUriToDeeplink` to open the wallet's app:
+*
+* - `'walletConnect'`: mint via `connectWithWalletConnect<Chain>`.
+* - `'metamaskSdkUri'`: mint via `connectWithMetaMaskUriEvm` or
+*   `connectWithMetaMaskUriSolana`. Emitted only for the MetaMask
+*   wallet entry — see `resolveUriConnectionType`.
 *
 * @param params.walletBook - The fetched wallet book.
-* @returns Tagged `walletConnect` options paired with their wallet option keys.
+* @returns Tagged options paired with their wallet option keys.
 * @not-instrumented
 */
-const buildWalletConnectOptions = ({ walletBook }) => {
+const buildUriDeeplinkOptions = ({ walletBook }) => {
 	const result = [];
 	for (const [walletKey, wallet] of Object.entries(walletBook.wallets)) {
 		if (shouldFilterWalletForWalletConnect({
@@ -4041,7 +4163,7 @@ const buildWalletConnectOptions = ({ walletBook }) => {
 					native: wallet.mobile?.native,
 					universal: wallet.mobile?.universal
 				},
-				type: "walletConnect"
+				type: resolveUriConnectionType({ walletOptionKey })
 			},
 			walletOptionKey
 		});
@@ -4382,10 +4504,11 @@ const groupOptionsByWalletOption = ({ options }) => {
 * wallet-option list is ordered — that's controlled by
 * `WalletOptionOrdering`.
 *
-* `withWalletProvider > walletConnect > inAppBrowser`
+* `withWalletProvider > walletConnect / metamaskSdkUri > inAppBrowser`
 */
 const CONNECTION_OPTION_PRIORITY = {
 	inAppBrowser: 2,
+	metamaskSdkUri: 1,
 	walletConnect: 1,
 	withWalletProvider: 0
 };
@@ -4404,7 +4527,7 @@ const getConnectionOptionPriority = ({ option }) => CONNECTION_OPTION_PRIORITY[o
 /**
 * Sorts a wallet option's `connectionOptions` so the most preferred option lands at
 * index 0. Primary sort is by option-type priority
-* (`withWalletProvider` > `walletConnect` > `inAppBrowser`);
+* (`withWalletProvider` > URI deeplink > `inAppBrowser`);
 * within a type, ties break alphabetically by `chain` for deterministic
 * output across calls.
 *
@@ -4528,7 +4651,7 @@ const hasInstalledProvider = ({ walletOption }) => walletOption.connectionOption
 *   this order:
 *     1. **Installed provider** — user already has the wallet available
 *        (`withWalletProvider` at index 0).
-*     2. **Connectable** — has at least one connection (`walletConnect`
+*     2. **Connectable** — has at least one connection (URI deeplink
 *        or `inAppBrowser`) but no installed provider.
 *     3. **Install-only** — no connection at all; only `installationUrls`.
 *   Within each tier, rank by the hand-curated {@link PRIORITY_WALLET_KEYS}
@@ -4578,45 +4701,28 @@ const EMPTY_WALLET_BOOK = {
 	wallets: {}
 };
 /**
-* Returns a catalogue of the external wallet options a user can sign in
-* with through this client. Each wallet option carries an ordered
-* `connectionOptions` array — `withWalletProvider` (direct), `walletConnect`
-* (deeplink/QR), or `inAppBrowser` (mobile webview). Wallet options without
-* any matching connections are omitted.
-*
-* `includeWithWalletProvider` defaults to `true`; all other inclusion flags
-* are opt-in. `walletOptionOrdering` defaults to `'relevance'` (Dynamic's
-* recommended order); pass `'alphabetical'` to sort by wallet option name
-* within each option-priority tier.
+* Returns the catalogue of external wallet options a user can sign in
+* with through this client. Always includes installed wallet providers;
+* pass `includeMobileOptions: true` to additionally surface
+* WalletConnect, in-app-browser, and install links.
 *
-* The wallet book is fetched only when an enabled flag needs it
-* (`includeWalletConnect`, `includeInAppBrowser`). Calls that only need
-* `includeWithWalletProvider` skip the fetch entirely.
-*
-* @param [params] - Inclusion flags + ordering preference.
+* @param [params] - Inclusion flag + ordering preference.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the wallet options catalogue.
 * @not-instrumented
 */
 const getWalletOptionsCatalogue = async (params = {}, client = require_InvalidParamError.getDefaultClient()) => {
-	const includeWithWalletProvider = params.includeWithWalletProvider ?? true;
-	const includeWalletConnect = params.includeWalletConnect ?? false;
-	const includeInAppBrowser = params.includeInAppBrowser ?? false;
-	const includeInstallation = params.includeInstallation ?? false;
+	const includeMobileOptions = params.includeMobileOptions ?? false;
 	const walletOptionOrdering = params.walletOptionOrdering ?? "relevance";
-	if (!includeWithWalletProvider && !includeWalletConnect && !includeInAppBrowser && !includeInstallation) return [];
-	const walletBook = includeWalletConnect || includeInAppBrowser || includeInstallation ? await fetchLegacyWalletBook(client) : EMPTY_WALLET_BOOK;
+	const walletBook = includeMobileOptions ? await fetchLegacyWalletBook(client) : EMPTY_WALLET_BOOK;
 	const allConnectionOptions = [];
-	if (includeWithWalletProvider) {
-		const entries = require_getVerifiedCredentialForWalletAccount.getWalletProviderRegistry(client).listProviderEntries();
-		allConnectionOptions.push(...buildWithWalletProviderOptions({
-			entries,
-			walletBook
-		}, client));
-	}
-	if (includeWalletConnect) allConnectionOptions.push(...buildWalletConnectOptions({ walletBook }));
-	if (includeInAppBrowser) allConnectionOptions.push(...buildInAppBrowserOptions({ walletBook }));
-	const installationUrlsByKey = includeInstallation ? buildInstallationUrlsByWalletOptionKey({ walletBook }) : /* @__PURE__ */ new Map();
+	const entries = require_getVerifiedCredentialForWalletAccount.getWalletProviderRegistry(client).listProviderEntries();
+	allConnectionOptions.push(...buildWithWalletProviderOptions({
+		entries,
+		walletBook
+	}, client));
+	if (includeMobileOptions) allConnectionOptions.push(...buildUriDeeplinkOptions({ walletBook }), ...buildInAppBrowserOptions({ walletBook }));
+	const installationUrlsByKey = includeMobileOptions ? buildInstallationUrlsByWalletOptionKey({ walletBook }) : /* @__PURE__ */ new Map();
 	const grouped = groupOptionsByWalletOption({ options: allConnectionOptions });
 	const allWalletOptionKeys = new Set([...grouped.keys(), ...installationUrlsByKey.keys()]);
 	const walletOptions = [];
@@ -4896,6 +5002,7 @@ const authenticateTotpMfaDevice = async ({ deviceId, code, createMfaTokenOptions
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the newly generated recovery codes.
 * @instrumented
+* @redact-params
 */
 const createNewMfaRecoveryCodes = async (client = require_InvalidParamError.getDefaultClient()) => {
 	const core = require_InvalidParamError.getCore(client);
@@ -4911,7 +5018,8 @@ const __createNewMfaRecoveryCodes_wrapped = require_InvalidParamError.instrument
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -6138,6 +6246,7 @@ const verifyOTPForUserUpdate = async ({ otpVerification, verificationToken, requ
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the verify response object upon successful verification.
 * @instrumented
+* @redact-params
 */
 const verifyOTP = async ({ otpVerification, verificationToken, requestedScopes }, client = require_InvalidParamError.getDefaultClient()) => {
 	let response;
@@ -6163,7 +6272,8 @@ const __verifyOTP_wrapped = require_InvalidParamError.instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -6587,13 +6697,12 @@ const getAddressesWithTypesFromConnectionResult = (connectionResult) => {
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the connected wallet account.
 * @throws NoAddressFoundError If the request to connect was successful but no address is connected to your app.
-* @instrumented
+*  @instrumented
 */
 const connectWithWalletProvider = async ({ walletProviderKey, addToDynamicWalletAccounts = true, hardwareWalletVendor }, client = require_InvalidParamError.getDefaultClient()) => {
 	const walletProvider = require_getVerifiedCredentialForWalletAccount.getWalletProviderByKey({ walletProviderKey }, client);
 	assertWalletProviderMethodDefined(walletProvider, "connect");
 	const { addresses } = await walletProvider.connect();
-	const currentAddresses = require_getVerifiedCredentialForWalletAccount.getWalletAccounts(client).map(({ address }) => address);
 	const mainAddress = addresses?.length ? addresses[0].address : null;
 	/**
 	* This error is thrown in case the wallet has no addresses connected
@@ -6601,27 +6710,25 @@ const connectWithWalletProvider = async ({ walletProviderKey, addToDynamicWallet
 	* user on the next steps.
 	*/
 	if (!mainAddress) throw new NoAddressFoundError();
-	const walletAccount = {
-		address: mainAddress,
-		addressesWithTypes: getAddressesWithTypesFromConnectionResult({ addresses }),
-		chain: walletProvider.chain,
-		hardwareWalletVendor,
-		id: require_getVerifiedCredentialForWalletAccount.formatWalletAccountId({
+	const [reconciledWalletAccount] = require_getNetworkProviderFromNetworkId.reconcileWalletAccountsAgainstClient({
+		addToDynamicWalletAccounts,
+		walletAccounts: [{
 			address: mainAddress,
+			addressesWithTypes: getAddressesWithTypesFromConnectionResult({ addresses }),
 			chain: walletProvider.chain,
+			hardwareWalletVendor,
+			id: require_getVerifiedCredentialForWalletAccount.formatWalletAccountId({
+				address: mainAddress,
+				chain: walletProvider.chain,
+				walletProviderKey
+			}),
+			lastSelectedAt: null,
+			verifiedCredentialId: null,
 			walletProviderKey
-		}),
-		lastSelectedAt: null,
-		verifiedCredentialId: null,
+		}],
 		walletProviderKey
-	};
-	if (currentAddresses.includes(mainAddress)) return walletAccount;
-	if (addToDynamicWalletAccounts) {
-		require_getNetworkProviderFromNetworkId.setUnverifiedWalletAccounts({ unverifiedWalletAccountsToUpdate: [walletAccount] }, client);
-		require_getVerifiedCredentialForWalletAccount.emitWalletAccountsChangedEvent(client);
-		require_getNetworkProviderFromNetworkId.createVisit({ walletAccount }, client);
-	}
-	return walletAccount;
+	}, client);
+	return reconciledWalletAccount;
 };
 const __connectWithWalletProvider_impl = connectWithWalletProvider;
 const __connectWithWalletProvider_wrapped = require_InvalidParamError.instrumentFunction({
@@ -7600,6 +7707,7 @@ exports.WalletProviderMethodUnavailableError = WalletProviderMethodUnavailableEr
 exports.acknowledgeRecoveryCodes = __acknowledgeRecoveryCodes_wrapped;
 exports.addCoinbaseOnrampOrderEventListener = addCoinbaseOnrampOrderEventListener;
 exports.addNetwork = __addNetwork_wrapped;
+exports.appendConnectionUriToDeeplink = appendConnectionUriToDeeplink;
 exports.assertWalletAccountSigningAvailability = assertWalletAccountSigningAvailability;
 exports.assertWalletProviderMethodDefined = assertWalletProviderMethodDefined;
 exports.attachCheckoutTransactionSource = __attachCheckoutTransactionSource_wrapped;