@dynamic-labs-sdk/client 1.3.0 → 1.5.0

package/dist/index.esm.js

@@ -1,12 +1,12 @@
-import { A as extractSessionId, B as name, C as isCookieEnabled, D as instrumentFunction, E as __getElevatedAccessToken_wrapped, F as getDefaultClient, I as setDefaultClient, O as DEFAULT_PII_FIELDS, P as NONCE_POOL_SIZE, R as BaseError, T as ValueMustBeDefinedError, V as version, _ as MfaRateLimitedError, a as DYNAMIC_ICONIC_SPRITE_URL, b as InvalidExternalAuthError, c as CHAINS_INFO_MAP, d as UnauthorizedError, g as SandboxMaximumThresholdReachedError, h as getNonce, j as randomString, k as getUserAgent, l as fetchAndStoreNonces, o as SDK_API_CORE_VERSION, s as getChainFromVerifiedCredentialChain, t as InvalidParamError, u as createApiClient, v as MfaInvalidOtpError, w as assertDefined, x as APIError, y as LinkCredentialError, z as getCore } from "./InvalidParamError-Za4cvW7K.esm.js";
-import { A as INITIALIZE_STORAGE_SYNC_TRACKER_KEY, C as createLogger, D as createDeferredPromise, E as CannotTrackError, F as __logoutWithReason_wrapped, G as isEqualShallow, H as isSignedIn, I as generateSessionKeys, L as fetchProjectSettings, M as REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY, N as isServerSideRendering, O as FETCH_PROJECT_SETTINGS_TRACKER_KEY, P as getBuffer, R as createStorageKeySchema, S as createKeychainService, U as retryOnFail, V as createLocalStorageAdapter, W as subscribeWithSelector, _ as MethodNotImplementedError, a as updateWalletProviderKeysForVerifiedCredentials, b as getKeychainIndexedDBName, c as createSignInMessageStatement, d as setUnverifiedWalletAccounts, f as createVisit, g as isCaptchaRequired, h as consumeCaptchaToken, i as getNetworksData, j as REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY, k as GENERATE_SESSION_KEYS_TRACKER_KEY, l as formatSignInMessage, m as __setCaptchaToken_wrapped, o as verifyMessageSignatureOwnership, p as hasExtension, s as removeUnverifiedWalletAccount, t as getNetworkProviderFromNetworkId, u as getAppMetadata, v as WalletAlreadyLinkedToAnotherUserError, w as createCrossTabBroadcast, x as createRealtimeService, y as NoNetworkProvidersError, z as createStorage } from "./getNetworkProviderFromNetworkId-RWcIZDgC.esm.js";
-import { A as onceEvent, C as formatWalletAccountId, D as emitEvent, O as offEvent, T as splitWalletProviderKey, _ as getWalletProviderRegistry, a as parseElevatedAccessToken, b as getWalletAccounts, d as isUserMissingMfaAuth, f as checkAndRaiseWalletAccountsChangedEvent, g as WalletProviderPriority, h as getWalletProviderFromWalletAccount, i as upsertElevatedAccessToken, k as onEvent, n as getWalletProviderByKey, o as restoreUserSharesForAllWalletAccounts, p as emitWalletAccountsChangedEvent, r as updateAuthFromVerifyResponse, t as getVerifiedCredentialForWalletAccount, u as getWalletProviders, w as normalizeAddress, y as NoWalletProviderFoundError } from "./getVerifiedCredentialForWalletAccount-Ozctwnyv.esm.js";
-import { n as __refreshAuth_wrapped, t as NotWaasWalletAccountError } from "./NotWaasWalletAccountError-By3Y4taq.esm.js";
-import { n as getMfaMethods, r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-C1u4Z__n.esm.js";
+import { $ as scrubParameters, B as getNonce, D as formatWalletAccountId, E as CHAINS_INFO_MAP, F as onceEvent, G as InvalidExternalAuthError, H as MfaRateLimitedError, J as isCookieEnabled, K as APIError, M as emitEvent, N as offEvent, O as normalizeAddress, P as onEvent, Q as instrumentFunction, T as getChainFromVerifiedCredentialChain, U as MfaInvalidOtpError, V as SandboxMaximumThresholdReachedError, W as LinkCredentialError, X as ValueMustBeDefinedError, Y as assertDefined, Z as __getElevatedAccessToken_wrapped, _ as generateSessionKeys, a as DYNAMIC_ICONIC_SPRITE_URL, b as isSignedIn, c as createApiClient, ct as setDefaultClient, dt as getCore, et as DEFAULT_PII_FIELDS, f as getWalletProviderFromWalletAccount, ft as name, g as NoWalletProviderFoundError, j as retryOnFail, k as splitWalletProviderKey, l as UnauthorizedError, m as getWalletProviderRegistry, nt as extractSessionId, o as SDK_API_CORE_VERSION, ot as NONCE_POOL_SIZE, p as WalletProviderPriority, pt as version, rt as randomString, s as fetchAndStoreNonces, st as getDefaultClient, t as InvalidParamError, tt as getUserAgent, u as __logoutWithReason_wrapped, ut as BaseError, v as fetchProjectSettings, x as getWalletAccounts, y as createStorageKeySchema } from "./InvalidParamError-DWjMfOZ5.esm.js";
+import { A as GENERATE_SESSION_KEYS_TRACKER_KEY, B as createLocalStorageAdapter, C as createKeychainService, D as CannotTrackError, F as getBuffer, I as subscribeWithSelector, L as isEqualShallow, M as REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY, N as REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY, O as createDeferredPromise, P as isServerSideRendering, R as createStorage, S as createRealtimeService, T as createCrossTabBroadcast, _ as isCaptchaRequired, a as verifyMessageSignatureOwnership, b as NoNetworkProvidersError, c as formatSignInMessage, d as updateWalletProviderKeysForVerifiedCredentials, f as setUnverifiedWalletAccounts, g as consumeCaptchaToken, h as __setCaptchaToken_wrapped, i as getNetworksData, j as INITIALIZE_STORAGE_SYNC_TRACKER_KEY, k as FETCH_PROJECT_SETTINGS_TRACKER_KEY, l as getAppMetadata, m as hasExtension, o as removeUnverifiedWalletAccount, p as createVisit, s as createSignInMessageStatement, t as getNetworkProviderFromNetworkId, u as reconcileWalletAccountsAgainstClient, v as MethodNotImplementedError, w as createLogger, x as getKeychainIndexedDBName, y as WalletAlreadyLinkedToAnotherUserError } from "./getNetworkProviderFromNetworkId-Cqp9eRSs.esm.js";
+import { a as parseElevatedAccessToken, d as isUserMissingMfaAuth, f as checkAndRaiseWalletAccountsChangedEvent, i as upsertElevatedAccessToken, n as getWalletProviderByKey, o as restoreUserSharesForAllWalletAccounts, r as updateAuthFromVerifyResponse, t as getVerifiedCredentialForWalletAccount, u as getWalletProviders } from "./getVerifiedCredentialForWalletAccount-BuUCX040.esm.js";
+import { n as __refreshAuth_wrapped, t as NotWaasWalletAccountError } from "./NotWaasWalletAccountError-C7NUlvvM.esm.js";
+import { n as getMfaMethods, r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-C_QPI1LH.esm.js";
 import { assertPackageVersion } from "@dynamic-labs-sdk/assert-package-version";
 import { AuthModeEnum, ExchangeKeyEnum, JwtVerifiedCredentialFormatEnum, MFAAction, MfaBackupCodeAcknowledgement, ProviderEnum, TokenScope, WaasBackupOptionsEnum, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
 import * as z from "zod/mini";
-import EventEmitter, { EventEmitter as EventEmitter$1 } from "eventemitter3";
+import EventEmitter$1, { EventEmitter } from "eventemitter3";
 import { browserSupportsWebAuthn, startAuthentication, startRegistration } from "@simplewebauthn/browser";
 
 //#region src/modules/state/raiseStateEvents/events.ts
@@ -26,11 +26,33 @@ const stateChangeEvents = {
 };
 
 //#endregion
-//#region src/utils/getNonce/prefetchNoncesIfNeeded/prefetchNoncesIfNeeded.ts
-/** @not-instrumented */
-const prefetchNoncesIfNeeded = async (client) => {
-	if (getCore(client).state.get().prefetchedNonces.length >= NONCE_POOL_SIZE) return;
-	await fetchAndStoreNonces(client);
+//#region src/utils/appendConnectionUriToDeeplink/appendConnectionUriToDeeplink.ts
+/**
+* Appends a wallet connection URI to a deeplink URL.
+*
+* Generic across URI-deeplink connection options — works for both
+* WalletConnect pairing URIs and MetaMask SDK URIs. Determines the
+* appropriate query parameter separator based on whether the deeplink
+* already contains query parameters.
+*
+* @param params.deeplinkUrl - The base deeplink URL (e.g., `walletapp://wc` or `walletapp://wc?param=value`).
+* @param params.connectionUri - The connection URI to append.
+* @returns The deeplink URL with the connection URI appended as a query parameter.
+*
+* @example
+* ```ts
+* appendConnectionUriToDeeplink({ deeplinkUrl: 'walletapp://wc', connectionUri: 'wc:123-456' })
+* // Returns: 'walletapp://wc?uri=wc%3A123-456'
+*
+* appendConnectionUriToDeeplink({ deeplinkUrl: 'walletapp://wc?param=value', connectionUri: 'wc:123-456' })
+* // Returns: 'walletapp://wc?param=value&uri=wc%3A123-456'
+* ```
+* @not-instrumented
+*/
+const appendConnectionUriToDeeplink = ({ connectionUri, deeplinkUrl }) => {
+	const url = new URL(deeplinkUrl);
+	url.searchParams.set("uri", connectionUri);
+	return url.href;
 };
 
 //#endregion
@@ -50,6 +72,14 @@ const createRuntimeServices = () => {
 	};
 };
 
+//#endregion
+//#region src/utils/getNonce/prefetchNoncesIfNeeded/prefetchNoncesIfNeeded.ts
+/** @not-instrumented */
+const prefetchNoncesIfNeeded = async (client) => {
+	if (getCore(client).state.get().prefetchedNonces.length >= NONCE_POOL_SIZE) return;
+	await fetchAndStoreNonces(client);
+};
+
 //#endregion
 //#region src/modules/auth/initializeAuth/setLongTimeout/setLongTimeout.ts
 /**
@@ -535,7 +565,7 @@ const createAsyncTrack = () => {
 	* This ensures no process is missed (as it would throw when tracked on a different node tick).
 	*/
 	let isTrackEnabled = true;
-	const eventEmitter = new EventEmitter$1();
+	const eventEmitter = new EventEmitter();
 	const allSettledPromise = createDeferredPromise();
 	const tracker = /* @__PURE__ */ new Map();
 	/**
@@ -582,7 +612,7 @@ const createAsyncTrack = () => {
 //#endregion
 //#region src/services/eventEmitter/createEventEmitter.ts
 /** @not-instrumented */
-const createEventEmitter = () => new EventEmitter();
+const createEventEmitter = () => new EventEmitter$1();
 
 //#endregion
 //#region src/errors/UnavailableInServerSideError.ts
@@ -626,10 +656,13 @@ const connectLoggerToInstrumentation = ({ environmentId, extensions, instrumenta
 		const { token, user } = state.get();
 		instrumentation.log({
 			environmentId,
-			parameters: {
-				args,
-				message
-			},
+			parameters: scrubParameters({
+				piiFields: instrumentation.config.piiFields,
+				value: {
+					args,
+					message
+				}
+			}),
 			registeredExtensionKeys: Array.from(extensions),
 			sdkSessionId,
 			sdkVersion,
@@ -1541,6 +1574,7 @@ const __checkStepUpAuth_wrapped = instrumentFunction({
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the assertion response containing the elevated access token.
 * @instrumented
+* @redact-params
 */
 const requestExternalAuthElevatedToken = async ({ externalJwt }, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -1568,7 +1602,8 @@ const __requestExternalAuthElevatedToken_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -1720,6 +1755,7 @@ const serverRegisterPasskey = async ({ registration, createMfaToken }, client) =
 * @returns A promise that resolves to the registration response.
 * @throws NoWebAuthNSupportError If WebAuthn is not supported by the browser.
 * @instrumented
+* @redact-params
 */
 const registerPasskey = async ({ createMfaToken } = {}, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -1742,7 +1778,8 @@ const __registerPasskey_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -1787,6 +1824,7 @@ const serverSigninPasskey = async ({ authentication, createMfaToken }, client) =
 * @returns A promise that resolves to the authentication response.
 * @throws NoWebAuthNSupportError If WebAuthn is not supported by the browser.
 * @instrumented
+* @redact-params
 */
 const signInWithPasskey = async ({ relatedOriginRpId } = {}, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -1806,7 +1844,8 @@ const __signInWithPasskey_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -2248,6 +2287,7 @@ const getPrimaryWalletAccount = (client = getDefaultClient()) => {
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the verify response.
 * @instrumented
+* @redact-params
 */
 const unlinkSocialAccount = async ({ verifiedCredentialId }, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -2273,22 +2313,30 @@ const __unlinkSocialAccount_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
-//#region src/modules/balances/getBalances/getBalances.ts
+//#region src/modules/balances/getTokenBalances/getTokenBalances.ts
 /**
-* Retrieves the token balances for a wallet account.
+* Retrieves the token balances for a wallet account on one chain. Fetched
+* from the Dynamic API.
+*
+* Use this for ERC-20-style token balances scoped to a single wallet
+* account. Supports optional spam filtering, price inclusion, native-token
+* inclusion, and one-or-many networks within the wallet's chain.
 *
-* This function fetches the balances of the tokens for the specified wallet account.
+* For native-only balance, use {@link getNativeBalance}. For a
+* multi-chain portfolio across many addresses, use
+* {@link getMultichainTokenBalances}.
 *
 * @param params.walletAccount - The wallet account to get the balances for.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to an array of token balances.
 * @not-instrumented
 */
-const getBalances = async ({ walletAccount, networkId, networkIds, includePrices, includeNative, filterSpamTokens, whitelistedContracts, forceRefresh }, client = getDefaultClient()) => {
+const getTokenBalances = async ({ walletAccount, networkId, networkIds, includePrices, includeNative, filterSpamTokens, whitelistedContracts, forceRefresh }, client = getDefaultClient()) => {
 	const core = getCore(client);
 	const apiClient = createApiClient({}, client);
 	if (!networkId && !networkIds) {
@@ -2310,19 +2358,22 @@ const getBalances = async ({ walletAccount, networkId, networkIds, includePrices
 };
 
 //#endregion
-//#region src/modules/balances/getMultichainBalances/getMultichainBalances.ts
+//#region src/modules/balances/getMultichainTokenBalances/getMultichainTokenBalances.ts
 /**
-* Retrieves token balances across multiple blockchain networks.
+* Retrieves token balances across multiple chains, networks, and addresses
+* in a single batched API request.
 *
-* This function fetches cryptocurrency and token balances for the user's
-* wallet addresses across different chains, networks and addresses specified in the request.
+* Use this for portfolio-style views that need to render a user's holdings
+* across their entire multi-chain wallet set. For a single account on one
+* chain, use {@link getTokenBalances}; for native-only balance, use
+* {@link getNativeBalance}.
 *
 * @param params.balanceRequest - The balance request configuration specifying which chains, networks and addresses to query.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the chain balances across multiple networks.
 * @not-instrumented
 */
-const getMultichainBalances = async ({ balanceRequest }, client = getDefaultClient()) => {
+const getMultichainTokenBalances = async ({ balanceRequest }, client = getDefaultClient()) => {
 	const core = getCore(client);
 	return (await createApiClient({}, client).postMultichainAccountBalances({
 		environmentId: core.environmentId,
@@ -2355,6 +2406,52 @@ const createCheckoutApiClient = async ({ transactionId }, client) => {
 	};
 };
 
+//#endregion
+//#region src/modules/checkout/utils/clearCheckoutSessionToken/clearCheckoutSessionToken.ts
+/**
+* Removes the locally stored checkout session token for the given transaction.
+*
+* The checkout session token is the anonymous credential that authorizes
+* mutations to a single in-flight checkout transaction. Once the transaction
+* has reached a terminal state (cancelled, expired, failed, completed) it can
+* no longer be advanced, and the token is dead weight that should not be
+* persisted in browser storage — leaving it around lets a later XSS payload
+* exfiltrate a credential with no further use, and it can also confuse the
+* SDK on subsequent loads into believing an active session exists.
+*
+* The server-side revocation lives in dashboard-api; this is the SDK-side
+* defense-in-depth.
+*
+* @not-instrumented
+*/
+const clearCheckoutSessionToken = async ({ transactionId }, client) => {
+	await getCore(client).storage.removeItem(createCheckoutSessionTokenStorageKey(transactionId));
+};
+
+//#endregion
+//#region src/modules/checkout/utils/withCheckoutSessionTokenCleanupOn401/withCheckoutSessionTokenCleanupOn401.ts
+/**
+* Checkout mutation routes are guarded server-side only by session-token
+* validation, so a 401 means the token is dead (revoked, expired, deleted,
+* or invalid). Leaving a dead token in `localStorage` widens the XSS
+* exfiltration surface for no benefit and makes the next SDK load attempt
+* requests that are guaranteed to fail.
+*
+* @not-instrumented
+*/
+const withCheckoutSessionTokenCleanupOn401 = async ({ call, transactionId }, client) => {
+	try {
+		return await call();
+	} catch (error) {
+		if (error instanceof APIError && error.status === 401) try {
+			await clearCheckoutSessionToken({ transactionId }, client);
+		} catch (cleanupError) {
+			getCore(client).logger.error("Failed to clear checkout session token after 401", cleanupError);
+		}
+		throw error;
+	}
+};
+
 //#endregion
 //#region src/modules/checkout/attachCheckoutTransactionSource/attachCheckoutTransactionSource.ts
 /**
@@ -2379,12 +2476,15 @@ const attachCheckoutTransactionSource = async (params, client = getDefaultClient
 		attachSourceRequest.fromChainId = params.fromChainId;
 		attachSourceRequest.fromChainName = params.fromChainName;
 	}
-	return apiClient.attachSource({
-		attachSourceRequest,
-		environmentId,
-		transactionId,
-		xDynamicCheckoutSessionToken: sessionToken
-	});
+	return withCheckoutSessionTokenCleanupOn401({
+		call: () => apiClient.attachSource({
+			attachSourceRequest,
+			environmentId,
+			transactionId,
+			xDynamicCheckoutSessionToken: sessionToken
+		}),
+		transactionId
+	}, client);
 };
 const __attachCheckoutTransactionSource_impl = attachCheckoutTransactionSource;
 const __attachCheckoutTransactionSource_wrapped = instrumentFunction({
@@ -2415,12 +2515,15 @@ const __attachCheckoutTransactionSource_wrapped = instrumentFunction({
 */
 const broadcastCheckoutTransaction = async ({ transactionId, txHash }, client = getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
-	return apiClient.recordCheckoutBroadcast({
-		environmentId,
-		recordBroadcastRequest: { txHash },
-		transactionId,
-		xDynamicCheckoutSessionToken: sessionToken
-	});
+	return withCheckoutSessionTokenCleanupOn401({
+		call: () => apiClient.recordCheckoutBroadcast({
+			environmentId,
+			recordBroadcastRequest: { txHash },
+			transactionId,
+			xDynamicCheckoutSessionToken: sessionToken
+		}),
+		transactionId
+	}, client);
 };
 const __broadcastCheckoutTransaction_impl = broadcastCheckoutTransaction;
 const __broadcastCheckoutTransaction_wrapped = instrumentFunction({
@@ -2447,12 +2550,15 @@ const __broadcastCheckoutTransaction_wrapped = instrumentFunction({
 */
 const cancelCheckoutTransaction = async ({ transactionId }, client = getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
-	const result = await apiClient.cancelCheckoutTransaction({
-		environmentId,
-		transactionId,
-		xDynamicCheckoutSessionToken: sessionToken
-	});
-	await getCore(client).storage.removeItem(createCheckoutSessionTokenStorageKey(transactionId));
+	const result = await withCheckoutSessionTokenCleanupOn401({
+		call: () => apiClient.cancelCheckoutTransaction({
+			environmentId,
+			transactionId,
+			xDynamicCheckoutSessionToken: sessionToken
+		}),
+		transactionId
+	}, client);
+	await clearCheckoutSessionToken({ transactionId }, client);
 	return result;
 };
 const __cancelCheckoutTransaction_impl = cancelCheckoutTransaction;
@@ -2553,16 +2659,19 @@ const getCheckoutTransaction = async ({ transactionId }, client = getDefaultClie
 */
 const getCheckoutTransactionQuote = async ({ fromChainId, fromTokenAddress, slippage, transactionId }, client = getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
-	return apiClient.quoteCheckoutTransaction({
-		environmentId,
-		quoteRequest: {
-			fromChainId,
-			fromTokenAddress,
-			slippage
-		},
-		transactionId,
-		xDynamicCheckoutSessionToken: sessionToken
-	});
+	return withCheckoutSessionTokenCleanupOn401({
+		call: () => apiClient.quoteCheckoutTransaction({
+			environmentId,
+			quoteRequest: {
+				fromChainId,
+				fromTokenAddress,
+				slippage
+			},
+			transactionId,
+			xDynamicCheckoutSessionToken: sessionToken
+		}),
+		transactionId
+	}, client);
 };
 
 //#endregion
@@ -2579,15 +2688,18 @@ const getCheckoutTransactionQuote = async ({ fromChainId, fromTokenAddress, slip
 */
 const prepareCheckoutTransaction = async ({ assertBalanceForGasCost, assertBalanceForTransferAmount, transactionId }, client = getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
-	return apiClient.prepareCheckoutTransaction({
-		environmentId,
-		prepareSigningRequest: {
-			assertBalanceForGasCost: assertBalanceForGasCost ?? false,
-			assertBalanceForTransferAmount: assertBalanceForTransferAmount ?? false
-		},
-		transactionId,
-		xDynamicCheckoutSessionToken: sessionToken
-	});
+	return withCheckoutSessionTokenCleanupOn401({
+		call: () => apiClient.prepareCheckoutTransaction({
+			environmentId,
+			prepareSigningRequest: {
+				assertBalanceForGasCost: assertBalanceForGasCost ?? false,
+				assertBalanceForTransferAmount: assertBalanceForTransferAmount ?? false
+			},
+			transactionId,
+			xDynamicCheckoutSessionToken: sessionToken
+		}),
+		transactionId
+	}, client);
 };
 const __prepareCheckoutTransaction_impl = prepareCheckoutTransaction;
 const __prepareCheckoutTransaction_wrapped = instrumentFunction({
@@ -2676,7 +2788,7 @@ const ensureCorrectActiveNetwork = async ({ requiredNetworkId, walletProvider },
 * @returns The transaction hash.
 * @instrumented
 */
-const executeSwapTransaction = async ({ walletAccount, signingPayload, onStepChange }, client = getDefaultClient()) => {
+const executeSwapTransaction = async ({ walletAccount, signingPayload, onStepChange, sponsorshipMode }, client = getDefaultClient()) => {
 	if (!SWAP_SUPPORTED_CHAINS.includes(walletAccount.chain)) throw new InvalidParamError(`Chain ${walletAccount.chain} is not supported for swap transactions`);
 	const walletProvider = getWalletProviderFromWalletAccount({ walletAccount }, client);
 	assertWalletProviderMethodDefined(walletProvider, "executeSwapTransaction");
@@ -2687,6 +2799,7 @@ const executeSwapTransaction = async ({ walletAccount, signingPayload, onStepCha
 	const { transactionHash } = await walletProvider.executeSwapTransaction({
 		onStepChange,
 		signingPayload,
+		sponsorshipMode,
 		walletAccount
 	});
 	return { transactionHash };
@@ -2871,7 +2984,7 @@ const detectDeviceRegistrationRedirect = ({ url }) => {
 /** @not-instrumented */
 const getRegisteredDevices = async (client = getDefaultClient()) => {
 	const core = getCore(client);
-	const apiClient = createApiClient({}, client);
+	const apiClient = createApiClient({ skipSessionExpiryLogout: true }, client);
 	try {
 		return (await apiClient.listDeviceRegistrations({ environmentId: core.environmentId })).deviceRegistrations;
 	} catch (error) {
@@ -3150,6 +3263,115 @@ const __createCryptoDotComPayment_wrapped = instrumentFunction({
 	}
 });
 
+//#endregion
+//#region src/modules/funding/moonpay/getMoonPayCurrencies/getMoonPayCurrencies.ts
+/**
+* Fetches the list of crypto currencies supported by MoonPay for the given chain
+* and network, filtered to active currencies only. Requires a MoonPay publishable
+* API key to be configured for the environment.
+*
+* @param params - The chain and optional network ID to filter currencies by.
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns An array of supported MoonPay currencies.
+* @instrumented
+*/
+const getMoonPayCurrencies = async (params, client = getDefaultClient()) => {
+	const core = getCore(client);
+	return (await createApiClient({ includeMfaToken: true }, client).getMoonPayCurrencies({
+		chain: params.chain,
+		environmentId: core.environmentId,
+		...params.networkId ? { networkId: params.networkId } : {}
+	})).currencies ?? [];
+};
+const __getMoonPayCurrencies_impl = getMoonPayCurrencies;
+const __getMoonPayCurrencies_wrapped = instrumentFunction({
+	fn: __getMoonPayCurrencies_impl,
+	functionName: "getMoonPayCurrencies",
+	getCore: () => {
+		try {
+			return getCore(getDefaultClient());
+		} catch {
+			return;
+		}
+	}
+});
+
+//#endregion
+//#region src/modules/funding/moonpay/errors/MoonPayInvalidUrlError.ts
+var MoonPayInvalidUrlError = class extends BaseError {
+	constructor() {
+		super({
+			cause: null,
+			code: "moonpay_invalid_url_error",
+			docsUrl: null,
+			name: "MoonPayInvalidUrlError",
+			shortMessage: "MoonPay is configured but returned an invalid or untrusted URL. This may indicate a misconfiguration — please contact support if the issue persists."
+		});
+	}
+};
+
+//#endregion
+//#region src/modules/funding/moonpay/errors/MoonPayProviderNotAvailableError.ts
+var MoonPayProviderNotAvailableError = class extends BaseError {
+	constructor() {
+		super({
+			cause: null,
+			code: "moonpay_provider_not_available_error",
+			docsUrl: null,
+			name: "MoonPayProviderNotAvailableError",
+			shortMessage: "MoonPay provider not available. Ensure MoonPay is enabled and a publishable API key is configured in the Dynamic dashboard."
+		});
+	}
+};
+
+//#endregion
+//#region src/modules/funding/moonpay/getMoonPayUrl/getMoonPayUrl.ts
+/**
+* Returns the signed MoonPay URL for the given wallet and token.
+*
+* Uses the Dynamic onramp API to retrieve the pre-signed URL that can be
+* opened in a browser tab to allow the user to purchase crypto via MoonPay.
+*
+* @param params - Parameters including chain, wallet address, and optional token/currency filters.
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The signed MoonPay URL.
+* @instrumented
+*/
+const getMoonPayUrl = async (params, client = getDefaultClient()) => {
+	const core = getCore(client);
+	const moonPayProvider = (await createApiClient({ includeMfaToken: true }, client).getSupportedOnramps({
+		chain: params.chain,
+		currency: params.currency,
+		environmentId: core.environmentId,
+		includeDisabled: true,
+		merchantName: params.merchantName,
+		networkId: params.networkId,
+		token: params.token,
+		tokenAmount: params.tokenAmount,
+		walletAddress: params.walletAddress
+	})).onramps?.find((provider) => provider.provider === ProviderEnum.MoonPay);
+	if (!moonPayProvider?.url) throw new MoonPayProviderNotAvailableError();
+	const parsedUrl = new URL(moonPayProvider.url);
+	const isValidHost = parsedUrl.hostname === "moonpay.com" || parsedUrl.hostname.endsWith(".moonpay.com");
+	if (parsedUrl.protocol !== "https:" || !isValidHost) {
+		core.logger.error("[getMoonPayUrl] Invalid URL returned by onramp API", { url: moonPayProvider.url });
+		throw new MoonPayInvalidUrlError();
+	}
+	return moonPayProvider.url;
+};
+const __getMoonPayUrl_impl = getMoonPayUrl;
+const __getMoonPayUrl_wrapped = instrumentFunction({
+	fn: __getMoonPayUrl_impl,
+	functionName: "getMoonPayUrl",
+	getCore: () => {
+		try {
+			return getCore(getDefaultClient());
+		} catch {
+			return;
+		}
+	}
+});
+
 //#endregion
 //#region src/modules/funding/kraken/createKrakenExchangeTransfer/createKrakenExchangeTransfer.ts
 /**
@@ -3467,30 +3689,39 @@ const transformGroup = ({ group }) => {
 };
 
 //#endregion
-//#region src/modules/legacyWalletBook/getWalletConnectCatalog/getChainFromWalletSchema/getChainFromWalletSchema.ts
+//#region src/utils/getChainFromWalletBookIdentifier/getChainFromWalletBookIdentifier.ts
 /**
-* Maps wallet book injected config chain identifiers to Chain type.
+* Resolves a wallet-book chain identifier (as found in
+* `injectedConfig[].chain` or as an alias embedded in a wallet key) to a
+* {@link Chain}. Looks up by `apiChainName` first, then by any
+* `legacyWalletBookAliases` declared on the corresponding `CHAINS_INFO_MAP`
+* entry.
+*
+* Returns `undefined` when the identifier doesn't match any known chain,
+* letting the caller pick its own fallback (e.g. defaulting to EVM, or
+* trying a different lookup strategy).
+*
+* Centralised here rather than in `legacyWalletBook` so all chain naming
+* knowledge stays alongside `CHAINS_INFO_MAP`.
 * @not-instrumented
 */
-const INJECTED_CHAIN_TO_CHAIN_MAP = {
-	algo: "ALGO",
-	aptos: "APTOS",
-	bitcoin: "BTC",
-	btc: "BTC",
-	cosmos: "COSMOS",
-	eclipse: "ECLIPSE",
-	evm: "EVM",
-	flow: "FLOW",
-	sol: "SOL",
-	spark: "SPARK",
-	starknet: "STARK",
-	sui: "SUI",
-	ton: "TON",
-	tron: "TRON"
+const getChainFromWalletBookIdentifier = ({ identifier }) => {
+	const normalised = identifier.toLowerCase();
+	return Object.keys(CHAINS_INFO_MAP).find((chain) => {
+		const info = CHAINS_INFO_MAP[chain];
+		return info.apiChainName === normalised || info.legacyWalletBookAliases?.includes(normalised) === true;
+	});
 };
+
+//#endregion
+//#region src/modules/legacyWalletBook/getWalletConnectCatalog/getChainFromWalletSchema/getChainFromWalletSchema.ts
 /**
 * Extracts the chain prefix from a chain identifier string.
 * For example, "eip155:1" -> "eip155", "solana:..." -> "solana"
+*
+* Exported so {@link getChainsFromWalletSchema} can apply the same
+* parsing to its multi-chain pass without duplicating the logic.
+* @not-instrumented
 */
 const extractChainPrefix = ({ chainIdentifier }) => {
 	const colonIndex = chainIdentifier.indexOf(":");
@@ -3498,80 +3729,22 @@ const extractChainPrefix = ({ chainIdentifier }) => {
 	return chainIdentifier.substring(0, colonIndex);
 };
 /**
-* Maps chain name patterns found in wallet keys to Chain type.
-* These are common suffixes or embedded chain identifiers in wallet keys.
-*/
-const WALLET_KEY_CHAIN_PATTERNS = [
-	{
-		chain: "SOL",
-		pattern: "sol"
-	},
-	{
-		chain: "SOL",
-		pattern: "solana"
-	},
-	{
-		chain: "BTC",
-		pattern: "btc"
-	},
-	{
-		chain: "BTC",
-		pattern: "bitcoin"
-	},
-	{
-		chain: "STARK",
-		pattern: "stark"
-	},
-	{
-		chain: "STARK",
-		pattern: "starknet"
-	},
-	{
-		chain: "SUI",
-		pattern: "sui"
-	},
-	{
-		chain: "APTOS",
-		pattern: "aptos"
-	},
-	{
-		chain: "COSMOS",
-		pattern: "cosmos"
-	},
-	{
-		chain: "FLOW",
-		pattern: "flow"
-	},
-	{
-		chain: "ALGO",
-		pattern: "algo"
-	},
-	{
-		chain: "TRON",
-		pattern: "tron"
-	},
-	{
-		chain: "TON",
-		pattern: "ton"
-	},
-	{
-		chain: "SPARK",
-		pattern: "spark"
-	},
-	{
-		chain: "ECLIPSE",
-		pattern: "eclipse"
-	}
-];
-/**
-* Attempts to extract the chain from a wallet key by looking for embedded chain identifiers.
+* Attempts to extract the chain from a wallet key by looking for embedded
+* chain identifiers (apiChainName + legacyWalletBookAliases from CHAINS_INFO_MAP).
+*
+* Derives patterns dynamically so adding a chain in `CHAINS_INFO_MAP`
+* picks it up here — no parallel hardcoded list.
 *
 * @param params.walletKey - The wallet key identifier.
 * @returns The chain type if found, undefined otherwise.
 */
 const getChainFromWalletKey = ({ walletKey }) => {
 	const lowerKey = walletKey.toLowerCase();
-	for (const { chain, pattern } of WALLET_KEY_CHAIN_PATTERNS) if (lowerKey.includes(pattern)) return chain;
+	const chains = Object.keys(CHAINS_INFO_MAP);
+	for (const chain of chains) {
+		const info = CHAINS_INFO_MAP[chain];
+		if ([info.apiChainName, ...info.legacyWalletBookAliases ?? []].some((pattern) => lowerKey.includes(pattern))) return chain;
+	}
 };
 /**
 * Gets the chain from a wallet book entry.
@@ -3585,8 +3758,11 @@ const getChainFromWalletKey = ({ walletKey }) => {
 */
 const getChainFromWalletSchema = ({ wallet, walletKey }) => {
 	if (wallet.injectedConfig && wallet.injectedConfig.length > 0) {
-		const injectedChain = wallet.injectedConfig[0].chain?.toLowerCase();
-		if (injectedChain && INJECTED_CHAIN_TO_CHAIN_MAP[injectedChain]) return INJECTED_CHAIN_TO_CHAIN_MAP[injectedChain];
+		const injectedChain = wallet.injectedConfig[0].chain;
+		if (injectedChain) {
+			const chain = getChainFromWalletBookIdentifier({ identifier: injectedChain });
+			if (chain) return chain;
+		}
 	}
 	if (wallet.chains && wallet.chains.length > 0) {
 		const firstChain = wallet.chains[0];
@@ -3834,11 +4010,111 @@ const getWalletConnectCatalogWalletByWalletProviderKey = async ({ walletProvider
 	}
 };
 
+//#endregion
+//#region src/utils/isMobile/isMobile.ts
+/**
+* Sourced from http://detectmobilebrowsers.com/
+* @not-instrumented
+*/
+const userAgentRegex1 = /(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows ce|xda|xiino|android|ios|ipad|playbook|silk/i;
+const userAgentRegex2 = /1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i;
+/** @not-instrumented */
+const isMobile = (maxTouchPointsOverride) => {
+	if (typeof window === "undefined" || typeof navigator === "undefined") return false;
+	return userAgentRegex1.test(navigator.userAgent) || userAgentRegex2.test(navigator.userAgent.substring(0, 4)) || isIPad(maxTouchPointsOverride) || isIPhone();
+};
+/** @not-instrumented */
+const isIPhone = () => typeof window === "undefined" || typeof navigator === "undefined" ? false : /iPhone|ios/.test(navigator.userAgent);
+/**
+* @param [optional] maxTouchPointsOverride - this is used for testing since
+* it seems that JSDOM doesn't support maxTouchPoints, so it was impossible
+* to mock it
+* @not-instrumented
+*/
+const isIPad = (maxTouchPointsOverride) => {
+	if (typeof window === "undefined" || typeof navigator === "undefined") return false;
+	const maxTouchPoints = maxTouchPointsOverride || navigator.maxTouchPoints;
+	return /iPad/.test(navigator.userAgent) || /Mac/.test(navigator.userAgent) && maxTouchPoints === 5;
+};
+/** @not-instrumented */
+const isIOS = (maxTouchPointsOverride) => {
+	if (typeof window === "undefined" || typeof navigator === "undefined") return false;
+	return isIPhone() || isIPad(maxTouchPointsOverride);
+};
+/** @not-instrumented */
+const isAndroid = () => isMobile() && !isIOS();
+/** @not-instrumented */
+const isSafariBrowser = () => {
+	if (typeof window === "undefined" || typeof navigator === "undefined") return false;
+	const { userAgent } = navigator;
+	return userAgent.includes("Safari") && !userAgent.includes("Chrome") && !userAgent.includes("Chromium");
+};
+/** @not-instrumented */
+const isEdgeBrowser = () => {
+	if (globalThis.window === void 0 || globalThis.navigator === void 0) return false;
+	return /\bEdg\//.test(navigator.userAgent);
+};
+/** @not-instrumented */
+const isOperaBrowser = () => {
+	if (globalThis.window === void 0 || globalThis.navigator === void 0) return false;
+	return /\b(OPR|Opera)\//.test(navigator.userAgent);
+};
+/** @not-instrumented */
+const isFirefoxBrowser = () => {
+	if (globalThis.window === void 0 || globalThis.navigator === void 0) return false;
+	return /\bFirefox\//.test(navigator.userAgent);
+};
+/** @not-instrumented */
+const isChromeBrowser = () => {
+	if (globalThis.window === void 0 || globalThis.navigator === void 0) return false;
+	return /\bChrome\//.test(navigator.userAgent) && !isEdgeBrowser() && !isOperaBrowser();
+};
+
+//#endregion
+//#region src/modules/walletOptionsCatalogue/getInstallationLinkForCurrentPlatform/getInstallationLinkForCurrentPlatform.ts
+/**
+* Resolves the {@link InstallationUrls} field that matches the platform
+* the SDK is currently running on:
+*
+* - iOS → `ios`
+* - Android → `android`
+* - Edge → `edge`
+* - Opera → `opera`
+* - Firefox → `firefox`
+* - Safari → `safari`
+* - Chrome (or other Chromium-based browsers) → `chrome`
+*
+* Returns `undefined` when no entry exists for the detected platform —
+* callers typically render a "not available on this device" affordance
+* in that case rather than offering a download targeted at a different
+* browser/OS.
+*
+* Each branch returns exactly the field for the detected platform — no
+* fallback to a different browser's URL. If you'd rather surface every
+* link a wallet's manifest publishes so the user can pick where to
+* install, read `installationUrls` directly instead of going through
+* this helper.
+*
+* @param params.installationUrls - The wallet option's `installationUrls`
+*   record (from `getWalletOptionsCatalogue`).
+* @returns The install URL for the detected platform, or `undefined`.
+* @not-instrumented
+*/
+const getInstallationLinkForCurrentPlatform = ({ installationUrls }) => {
+	if (isIOS()) return installationUrls.ios;
+	if (isAndroid()) return installationUrls.android;
+	if (isEdgeBrowser()) return installationUrls.edge;
+	if (isOperaBrowser()) return installationUrls.opera;
+	if (isFirefoxBrowser()) return installationUrls.firefox;
+	if (isSafariBrowser()) return installationUrls.safari;
+	if (isChromeBrowser()) return installationUrls.chrome;
+};
+
 //#endregion
 //#region src/modules/walletOptionsCatalogue/resolveWalletBookWalletOptionKey/resolveWalletBookWalletOptionKey.ts
 /**
 * Resolves which wallet option (group) a wallet book entry belongs to. Used
-* by the catalogue's wallet-book-driven transformers (`walletConnect`,
+* by the catalogue's wallet-book-driven transformers (URI deeplink,
 * `inAppBrowser`, `installation`) to bucket their emitted options.
 *
 * Wallet book entries inconsistently use `group` / `chainGroup` /
@@ -3993,24 +4269,150 @@ const buildInstallationUrlsByWalletOptionKey = ({ walletBook }) => {
 };
 
 //#endregion
-//#region src/modules/walletOptionsCatalogue/buildWalletConnectOptions/buildWalletConnectOptions.ts
+//#region src/modules/legacyWalletBook/hasUsableDeeplink/hasUsableDeeplink.ts
 /**
-* A wallet only deserves a `walletConnect` catalogue option if it has at
-* least one mobile deeplink — that's the value-add the option provides over
-* the bare WC pairing URI. Wallets that exist in the wallet book but don't
-* expose a deeplink (rare, but present) are silently skipped.
+* Whether a wallet book entry exposes at least one mobile deeplink the
+* catalogue can drive — either a native scheme (`metamask://`) or a
+* universal link (`https://metamask.app.link`). Used by the URI-deeplink
+* builders (`buildWalletConnectOptions`, `buildMetaMaskSdkUriOptions`)
+* to skip wallets that have no app to launch.
+*
+* @param params.wallet - The wallet schema from the wallet book.
+* @returns True when the wallet has a native or universal mobile link.
+* @not-instrumented
 */
 const hasUsableDeeplink = ({ wallet }) => Boolean(wallet.mobile?.native || wallet.mobile?.universal);
+
+//#endregion
+//#region src/modules/walletOptionsCatalogue/buildMetaMaskSdkUriOptions/buildMetaMaskSdkUriOptions.ts
+/**
+* Wallet option key the MetaMask SDK URI extension targets.
+*/
+const METAMASK_WALLET_OPTION_KEY = "metamask";
+/**
+* Chains the MetaMask SDK URI pairing supports.
+*
+* Unlike WalletConnect — whose per-wallet chain support is read from the
+* wallet book — the MetaMask SDK URI is a single Dynamic integration whose
+* chain coverage is defined by which `connectWithMetaMaskUri<Chain>`
+* primitives the SDK ships (EVM + SOL). The MetaMask wallet-book entry only
+* advertises its EVM (`eip155`) chains, so deriving the chain from the book
+* would never surface the Solana pairing; the SDK's own capabilities are
+* listed explicitly instead.
+*/
+const METAMASK_SDK_URI_SUPPORTED_CHAINS = ["EVM", "SOL"];
+/**
+* Builds the `metamaskSdkUri`-discriminator catalogue options from a
+* fetched wallet book. The MetaMask SDK URI extension only targets the
+* MetaMask wallet, so the builder iterates the book looking for the
+* entry whose resolved wallet option key is `'metamask'`.
+*
+* Applies the generic `shouldFilterWallet` rules (drops embedded keys +
+* injected-only-without-links entries). Crucially does NOT require WC
+* `sign_v2` support — MetaMask SDK URI is a different protocol from
+* WalletConnect, so the WC-specific filter does not apply here.
+*
+* Emits one `metamaskSdkUri` option per chain the MetaMask SDK URI pairing
+* supports (see {@link METAMASK_SDK_URI_SUPPORTED_CHAINS}) so the picker can
+* offer both the EVM and Solana pairings for the single MetaMask entry.
+*
+* @param params.walletBook - The fetched wallet book.
+* @returns Tagged `metamaskSdkUri` options for MetaMask if eligible, otherwise an empty array.
+* @not-instrumented
+*/
+const buildMetaMaskSdkUriOptions = ({ walletBook }) => {
+	for (const [walletKey, wallet] of Object.entries(walletBook.wallets)) {
+		const walletOptionKey = resolveWalletBookWalletOptionKey({
+			wallet,
+			walletKey
+		});
+		if (walletOptionKey !== METAMASK_WALLET_OPTION_KEY) continue;
+		if (shouldFilterWallet({
+			wallet,
+			walletKey
+		})) continue;
+		if (!hasUsableDeeplink({ wallet })) continue;
+		const deeplinks = {
+			native: wallet.mobile?.native,
+			universal: wallet.mobile?.universal
+		};
+		return METAMASK_SDK_URI_SUPPORTED_CHAINS.map((chain) => ({
+			option: {
+				chain,
+				deeplinks,
+				type: "metamaskSdkUri"
+			},
+			walletOptionKey
+		}));
+	}
+	return [];
+};
+
+//#endregion
+//#region src/modules/legacyWalletBook/getWalletConnectCatalog/getChainsFromWalletSchema/getChainsFromWalletSchema.ts
 /**
-* Builds the `walletConnect` catalogue options from a fetched wallet book.
-* Applies the WalletConnect-specific eligibility filter
+* Returns every chain a wallet book entry advertises support for —
+* deduped, in `injectedConfig` order, then `chains` order. Used by the
+* catalogue's WalletConnect builder so a multi-chain wallet (e.g. Trust
+* supports EVM + SOL) gets one option per chain rather than one option
+* for whichever chain `getChainFromWalletSchema` happened to pick first.
+*
+* Falls back to {@link getChainFromWalletSchema}'s single-result behavior
+* (`['EVM']` default) when neither field is populated, so the helper
+* never returns an empty array — every eligible wallet emits at least
+* one option.
+*
+* @param params.wallet - The wallet schema from the wallet book.
+* @param [params.walletKey] - The wallet key identifier (used as last-resort fallback).
+* @returns Ordered, deduped array of Chains.
+* @not-instrumented
+*/
+const getChainsFromWalletSchema = ({ wallet, walletKey }) => {
+	const chains = /* @__PURE__ */ new Set();
+	for (const entry of wallet.injectedConfig ?? []) {
+		if (!entry.chain) continue;
+		const chain = getChainFromWalletBookIdentifier({ identifier: entry.chain });
+		if (chain) chains.add(chain);
+	}
+	for (const identifier of wallet.chains ?? []) {
+		const prefix = extractChainPrefix({ chainIdentifier: identifier });
+		try {
+			const chain = getChainFromVerifiedCredentialChain(prefix);
+			chains.add(chain);
+		} catch {}
+	}
+	if (chains.size === 0) {
+		const chain = getChainFromWalletSchema({
+			wallet,
+			walletKey
+		});
+		chains.add(chain);
+	}
+	return Array.from(chains);
+};
+
+//#endregion
+//#region src/modules/walletOptionsCatalogue/buildWalletConnectOptions/buildWalletConnectOptions.ts
+/**
+* Chains Dynamic ships a WalletConnect extension for. Anything else a
+* wallet book entry advertises (Cosmos, BTC, …) gets filtered out — the
+* catalogue should not surface a chain the SDK has no `connectWithWalletConnect<Chain>`
+* primitive for.
+*/
+const WALLETCONNECT_SUPPORTED_CHAINS = new Set(["EVM", "SOL"]);
+/**
+* Builds the `walletConnect`-discriminator catalogue options from a fetched
+* wallet book. Applies the WalletConnect-specific eligibility filter
 * (`shouldFilterWalletForWalletConnect`) so embedded wallets and entries
 * without `sign_v2` support are excluded — same surface as
 * `getWalletConnectCatalog`.
 *
-* Each emitted option carries the wallet's mobile deeplinks. Customers
-* combine these with their chain's `connectWithWalletConnect<Chain>` URI via
-* `appendWalletConnectUriToDeepLink` to open the wallet's app.
+* Skips the MetaMask wallet entry: MetaMask is steered to its own URI
+* connection extension via `buildMetaMaskSdkUriOptions`. Keeping the two
+* builders separate means each protocol owns its own eligibility rules
+* (WC needs `sign_v2`; MM SDK URI does not), so excluding one
+* discriminator via `excludedConnectionOptionTypes` doesn't accidentally
+* gate the other.
 *
 * @param params.walletBook - The fetched wallet book.
 * @returns Tagged `walletConnect` options paired with their wallet option keys.
@@ -4028,11 +4430,12 @@ const buildWalletConnectOptions = ({ walletBook }) => {
 			wallet,
 			walletKey
 		});
-		const chain = getChainFromWalletSchema({
+		if (walletOptionKey === "metamask") continue;
+		const chains = getChainsFromWalletSchema({
 			wallet,
 			walletKey
-		});
-		result.push({
+		}).filter((chain) => WALLETCONNECT_SUPPORTED_CHAINS.has(chain));
+		for (const chain of chains) result.push({
 			option: {
 				chain,
 				deeplinks: {
@@ -4056,12 +4459,19 @@ const buildWalletConnectOptions = ({ walletBook }) => {
 *
 * Display merge rules (provider self-announced metadata wins where set):
 *
-* - `name`: `displayOverride.name` ?? wallet book group name ?? bare key.
-* - `iconUrl`: `displayOverride.iconUrl` ?? wallet book group sprite URL ?? `''`.
-* - `primaryColor`: wallet book group brand color only (providers do not
-*   ship a primary color in their announcement metadata).
+* - `name`: `displayOverride.name` ?? wallet book group name ?? wallet
+*   book wallet name ?? bare key.
+* - `iconUrl`: `displayOverride.iconUrl` ?? wallet book group sprite URL
+*   ?? wallet book wallet sprite URL ?? `''`.
+* - `primaryColor`: wallet book group brand color ?? wallet book wallet
+*   brand color (providers do not ship a primary color in their
+*   announcement metadata).
 * - `installationUrls`: copied through if present.
 *
+* The per-wallet fallback handles wallets that exist as individual entries
+* in the book (e.g. Rainbow) rather than as members of a multi-wallet group
+* — those don't get a `walletBook.groups[…]` shell.
+*
 * Why provider precedence: a registered wallet provider knows its own
 * brand best (EIP-6963 / Wallet Standard / vendor SDK announcement is the
 * wallet authoring its own identity). The wallet book fills in fields the
@@ -4079,16 +4489,42 @@ const buildWalletOption = ({ connectionOptions, displayOverride, installationUrl
 	const group = walletBook.groups[walletOptionKey];
 	const groupSpriteId = group?.brand?.spriteId;
 	const groupIconUrl = groupSpriteId ? getSpriteUrl({ spriteId: groupSpriteId }) : void 0;
+	const walletEntry = walletBook.wallets[walletOptionKey];
+	const walletSpriteId = walletEntry?.brand?.spriteId;
+	const walletIconUrl = walletSpriteId ? getSpriteUrl({ spriteId: walletSpriteId }) : void 0;
 	return {
 		connectionOptions,
-		iconUrl: displayOverride?.iconUrl ?? groupIconUrl ?? "",
+		iconUrl: displayOverride?.iconUrl ?? groupIconUrl ?? walletIconUrl ?? "",
 		installationUrls,
 		key: walletOptionKey,
-		name: displayOverride?.name ?? group?.name ?? walletOptionKey,
-		primaryColor: group?.brand?.primaryColor
+		name: displayOverride?.name ?? group?.name ?? walletEntry?.name ?? walletOptionKey,
+		primaryColor: group?.brand?.primaryColor ?? walletEntry?.brand?.primaryColor
 	};
 };
 
+//#endregion
+//#region src/modules/wallets/hasWalletProviderConnectMethod/hasWalletProviderConnectMethod.ts
+/**
+* Returns true when the given wallet provider exposes a `connect` method,
+* which is the signal we use to decide whether it belongs in the external
+* wallet picker as an `available provider`.
+*
+* Providers that don't expose `connect` (embedded wallets,
+* account-abstraction wrappers, MetaMask SDK / WalletConnect-backed
+* providers) are still sign-in capable, but via different SDK entry
+* points — they should not appear in the external picker as a
+* `withWalletProvider`-style option.
+*
+* Centralizing the predicate means future tweaks (e.g. a registry of
+* provider keys to exclude) land in one place and every consumer stays
+* in lockstep.
+*
+* @param params.walletProvider - The wallet provider to test.
+* @returns True when the provider exposes a `connect` method.
+* @not-instrumented
+*/
+const hasWalletProviderConnectMethod = ({ walletProvider }) => Boolean(walletProvider.connect);
+
 //#endregion
 //#region src/modules/walletOptionsCatalogue/classifyWithWalletProviderSource/classifyWithWalletProviderSource.ts
 /**
@@ -4168,7 +4604,7 @@ const normalizeWalletDisplayName = (displayName) => displayName.toLowerCase().re
 
 //#endregion
 //#region src/modules/walletOptionsCatalogue/findWalletOptionKeyForProviderKey/findByNameMatch/findByNameMatch.ts
-const normalize = (value) => value.toLowerCase().replace(/\s+/g, "");
+const normalize = (value) => value === void 0 ? void 0 : value.toLowerCase().replace(/\s+/g, "");
 /**
 * Looks for a wallet book entry whose `name` or `shortName` normalizes to
 * the same string as `candidate`. Used as a fallback by
@@ -4288,6 +4724,7 @@ const findWalletOptionKeyForProviderKey = ({ chain, walletBook, walletProvider }
 const buildWithWalletProviderOptions = ({ entries, walletBook }, client) => {
 	const result = [];
 	for (const entry of entries) {
+		if (!hasWalletProviderConnectMethod({ walletProvider: entry.walletProvider })) continue;
 		const source = classifyWithWalletProviderSource({ entry });
 		if (!source) {
 			getCore(client).logger.error("buildWithWalletProviderOptions: registered wallet provider has an unrecognised priority — unable to identify how this wallet was registered", {
@@ -4380,10 +4817,11 @@ const groupOptionsByWalletOption = ({ options }) => {
 * wallet-option list is ordered — that's controlled by
 * `WalletOptionOrdering`.
 *
-* `withWalletProvider > walletConnect > inAppBrowser`
+* `withWalletProvider > walletConnect / metamaskSdkUri > inAppBrowser`
 */
 const CONNECTION_OPTION_PRIORITY = {
 	inAppBrowser: 2,
+	metamaskSdkUri: 1,
 	walletConnect: 1,
 	withWalletProvider: 0
 };
@@ -4402,7 +4840,7 @@ const getConnectionOptionPriority = ({ option }) => CONNECTION_OPTION_PRIORITY[o
 /**
 * Sorts a wallet option's `connectionOptions` so the most preferred option lands at
 * index 0. Primary sort is by option-type priority
-* (`withWalletProvider` > `walletConnect` > `inAppBrowser`);
+* (`withWalletProvider` > URI deeplink > `inAppBrowser`);
 * within a type, ties break alphabetically by `chain` for deterministic
 * output across calls.
 *
@@ -4526,7 +4964,7 @@ const hasInstalledProvider = ({ walletOption }) => walletOption.connectionOption
 *   this order:
 *     1. **Installed provider** — user already has the wallet available
 *        (`withWalletProvider` at index 0).
-*     2. **Connectable** — has at least one connection (`walletConnect`
+*     2. **Connectable** — has at least one connection (URI deeplink
 *        or `inAppBrowser`) but no installed provider.
 *     3. **Install-only** — no connection at all; only `installationUrls`.
 *   Within each tier, rank by the hand-curated {@link PRIORITY_WALLET_KEYS}
@@ -4576,45 +5014,40 @@ const EMPTY_WALLET_BOOK = {
 	wallets: {}
 };
 /**
-* Returns a catalogue of the external wallet options a user can sign in
-* with through this client. Each wallet option carries an ordered
-* `connectionOptions` array — `withWalletProvider` (direct), `walletConnect`
-* (deeplink/QR), or `inAppBrowser` (mobile webview). Wallet options without
-* any matching connections are omitted.
-*
-* `includeWithWalletProvider` defaults to `true`; all other inclusion flags
-* are opt-in. `walletOptionOrdering` defaults to `'relevance'` (Dynamic's
-* recommended order); pass `'alphabetical'` to sort by wallet option name
-* within each option-priority tier.
+* Returns the catalogue of external wallet options a user can sign in
+* with through this client. Always includes installed wallet providers;
+* pass `includeMobileOptions: true` to additionally surface
+* WalletConnect, in-app-browser, and install links.
 *
-* The wallet book is fetched only when an enabled flag needs it
-* (`includeWalletConnect`, `includeInAppBrowser`). Calls that only need
-* `includeWithWalletProvider` skip the fetch entirely.
+* Pass `excludedConnectionOptionTypes` to drop specific connection types
+* from the catalogue (e.g. `['inAppBrowser']` on desktop). Wallets whose
+* only connection was an excluded type fall through to the install-only
+* tier of the relevance ordering.
 *
-* @param [params] - Inclusion flags + ordering preference.
+* @param [params] - Inclusion flag + ordering preference + exclusions.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the wallet options catalogue.
 * @not-instrumented
 */
 const getWalletOptionsCatalogue = async (params = {}, client = getDefaultClient()) => {
-	const includeWithWalletProvider = params.includeWithWalletProvider ?? true;
-	const includeWalletConnect = params.includeWalletConnect ?? false;
-	const includeInAppBrowser = params.includeInAppBrowser ?? false;
-	const includeInstallation = params.includeInstallation ?? false;
+	const includeMobileOptions = params.includeMobileOptions ?? false;
 	const walletOptionOrdering = params.walletOptionOrdering ?? "relevance";
-	if (!includeWithWalletProvider && !includeWalletConnect && !includeInAppBrowser && !includeInstallation) return [];
-	const walletBook = includeWalletConnect || includeInAppBrowser || includeInstallation ? await fetchLegacyWalletBook(client) : EMPTY_WALLET_BOOK;
+	const excludedConnectionOptionTypes = new Set(params.excludedConnectionOptionTypes ?? []);
+	const walletBook = includeMobileOptions ? await fetchLegacyWalletBook(client) : EMPTY_WALLET_BOOK;
 	const allConnectionOptions = [];
-	if (includeWithWalletProvider) {
+	if (!excludedConnectionOptionTypes.has("withWalletProvider")) {
 		const entries = getWalletProviderRegistry(client).listProviderEntries();
 		allConnectionOptions.push(...buildWithWalletProviderOptions({
 			entries,
 			walletBook
 		}, client));
 	}
-	if (includeWalletConnect) allConnectionOptions.push(...buildWalletConnectOptions({ walletBook }));
-	if (includeInAppBrowser) allConnectionOptions.push(...buildInAppBrowserOptions({ walletBook }));
-	const installationUrlsByKey = includeInstallation ? buildInstallationUrlsByWalletOptionKey({ walletBook }) : /* @__PURE__ */ new Map();
+	if (includeMobileOptions) {
+		if (!excludedConnectionOptionTypes.has("walletConnect")) allConnectionOptions.push(...buildWalletConnectOptions({ walletBook }));
+		if (!excludedConnectionOptionTypes.has("metamaskSdkUri")) allConnectionOptions.push(...buildMetaMaskSdkUriOptions({ walletBook }));
+		if (!excludedConnectionOptionTypes.has("inAppBrowser")) allConnectionOptions.push(...buildInAppBrowserOptions({ walletBook }));
+	}
+	const installationUrlsByKey = includeMobileOptions ? buildInstallationUrlsByWalletOptionKey({ walletBook }) : /* @__PURE__ */ new Map();
 	const grouped = groupOptionsByWalletOption({ options: allConnectionOptions });
 	const allWalletOptionKeys = new Set([...grouped.keys(), ...installationUrlsByKey.keys()]);
 	const walletOptions = [];
@@ -4894,6 +5327,7 @@ const authenticateTotpMfaDevice = async ({ deviceId, code, createMfaTokenOptions
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the newly generated recovery codes.
 * @instrumented
+* @redact-params
 */
 const createNewMfaRecoveryCodes = async (client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -4909,7 +5343,8 @@ const __createNewMfaRecoveryCodes_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -6136,6 +6571,7 @@ const verifyOTPForUserUpdate = async ({ otpVerification, verificationToken, requ
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the verify response object upon successful verification.
 * @instrumented
+* @redact-params
 */
 const verifyOTP = async ({ otpVerification, verificationToken, requestedScopes }, client = getDefaultClient()) => {
 	let response;
@@ -6161,7 +6597,8 @@ const __verifyOTP_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	redactAll: true
 });
 
 //#endregion
@@ -6535,33 +6972,6 @@ const __confirmTransaction_wrapped = instrumentFunction({
 	}
 });
 
-//#endregion
-//#region src/utils/isMobile/isMobile.ts
-/**
-* Sourced from http://detectmobilebrowsers.com/
-* @not-instrumented
-*/
-const userAgentRegex1 = /(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows ce|xda|xiino|android|ios|ipad|playbook|silk/i;
-const userAgentRegex2 = /1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i;
-/** @not-instrumented */
-const isMobile = (maxTouchPointsOverride) => {
-	if (typeof window === "undefined" || typeof navigator === "undefined") return false;
-	return userAgentRegex1.test(navigator.userAgent) || userAgentRegex2.test(navigator.userAgent.substring(0, 4)) || isIPad(maxTouchPointsOverride) || isIPhone();
-};
-/** @not-instrumented */
-const isIPhone = () => typeof window === "undefined" || typeof navigator === "undefined" ? false : /iPhone|ios/.test(navigator.userAgent);
-/**
-* @param [optional] maxTouchPointsOverride - this is used for testing since
-* it seems that JSDOM doesn't support maxTouchPoints, so it was impossible
-* to mock it
-* @not-instrumented
-*/
-const isIPad = (maxTouchPointsOverride) => {
-	if (typeof window === "undefined" || typeof navigator === "undefined") return false;
-	const maxTouchPoints = maxTouchPointsOverride || navigator.maxTouchPoints;
-	return /iPad/.test(navigator.userAgent) || /Mac/.test(navigator.userAgent) && maxTouchPoints === 5;
-};
-
 //#endregion
 //#region src/modules/wallets/utils/getAddressesWithTypesFromConnectionResult/getAddressesWithTypesFromConnectionResult.ts
 /** @not-instrumented */
@@ -6585,13 +6995,12 @@ const getAddressesWithTypesFromConnectionResult = (connectionResult) => {
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the connected wallet account.
 * @throws NoAddressFoundError If the request to connect was successful but no address is connected to your app.
-* @instrumented
+*  @instrumented
 */
 const connectWithWalletProvider = async ({ walletProviderKey, addToDynamicWalletAccounts = true, hardwareWalletVendor }, client = getDefaultClient()) => {
 	const walletProvider = getWalletProviderByKey({ walletProviderKey }, client);
 	assertWalletProviderMethodDefined(walletProvider, "connect");
 	const { addresses } = await walletProvider.connect();
-	const currentAddresses = getWalletAccounts(client).map(({ address }) => address);
 	const mainAddress = addresses?.length ? addresses[0].address : null;
 	/**
 	* This error is thrown in case the wallet has no addresses connected
@@ -6599,27 +7008,25 @@ const connectWithWalletProvider = async ({ walletProviderKey, addToDynamicWallet
 	* user on the next steps.
 	*/
 	if (!mainAddress) throw new NoAddressFoundError();
-	const walletAccount = {
-		address: mainAddress,
-		addressesWithTypes: getAddressesWithTypesFromConnectionResult({ addresses }),
-		chain: walletProvider.chain,
-		hardwareWalletVendor,
-		id: formatWalletAccountId({
+	const [reconciledWalletAccount] = reconcileWalletAccountsAgainstClient({
+		addToDynamicWalletAccounts,
+		walletAccounts: [{
 			address: mainAddress,
+			addressesWithTypes: getAddressesWithTypesFromConnectionResult({ addresses }),
 			chain: walletProvider.chain,
+			hardwareWalletVendor,
+			id: formatWalletAccountId({
+				address: mainAddress,
+				chain: walletProvider.chain,
+				walletProviderKey
+			}),
+			lastSelectedAt: null,
+			verifiedCredentialId: null,
 			walletProviderKey
-		}),
-		lastSelectedAt: null,
-		verifiedCredentialId: null,
+		}],
 		walletProviderKey
-	};
-	if (currentAddresses.includes(mainAddress)) return walletAccount;
-	if (addToDynamicWalletAccounts) {
-		setUnverifiedWalletAccounts({ unverifiedWalletAccountsToUpdate: [walletAccount] }, client);
-		emitWalletAccountsChangedEvent(client);
-		createVisit({ walletAccount }, client);
-	}
-	return walletAccount;
+	}, client);
+	return reconciledWalletAccount;
 };
 const __connectWithWalletProvider_impl = connectWithWalletProvider;
 const __connectWithWalletProvider_wrapped = instrumentFunction({
@@ -6906,7 +7313,7 @@ const __connectAndVerifyWithWalletProvider_wrapped = instrumentFunction({
 * @not-instrumented
 */
 const getAvailableWalletProvidersData = (client = getDefaultClient()) => {
-	return getWalletProviders(client).filter((walletProvider) => Boolean(walletProvider.connect)).map((walletProvider) => ({
+	return getWalletProviders(client).filter((walletProvider) => hasWalletProviderConnectMethod({ walletProvider })).map((walletProvider) => ({
 		chain: walletProvider.chain,
 		groupKey: walletProvider.groupKey,
 		key: walletProvider.key,
@@ -6969,6 +7376,22 @@ const getWalletProviderDataByKey = ({ walletProviderKey }, client = getDefaultCl
 	};
 };
 
+//#endregion
+//#region src/modules/wallets/isAnyWalletAccountConnected/isAnyWalletAccountConnected.ts
+/**
+* Checks whether the session has at least one connected wallet account.
+*
+* Both verified and unverified wallet accounts count as connected. This is a
+* single building block for a custom signed-in check — combine it with whatever
+* else your app considers "signed in" (e.g. `client.user`, completed onboarding,
+* a required embedded wallet, …).
+*
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns True if the session has at least one wallet account, false otherwise.
+* @not-instrumented
+*/
+const isAnyWalletAccountConnected = (client = getDefaultClient()) => getWalletAccounts(client).length > 0;
+
 //#endregion
 //#region src/modules/wallets/hardwareWallet/canConnectWithHardwareWallet/canConnectWithHardwareWallet.ts
 /**
@@ -7080,19 +7503,23 @@ const getActiveNetworkId = ({ walletAccount }, client = getDefaultClient()) => {
 };
 
 //#endregion
-//#region src/modules/wallets/networks/getBalance/getBalance.ts
+//#region src/modules/wallets/networks/getNativeBalance/getNativeBalance.ts
 /**
-* Retrieves the native token balance for a wallet account.
+* Retrieves the native token balance for a wallet account on its active
+* network. Reads directly from the chain's network provider (RPC), not
+* the Dynamic API.
 *
-* This function fetches the balance of the native cryptocurrency
-* (e.g., ETH, SOL, BTC, etc.) for the specified wallet account.
+* Use this when you only need the user's gas / native-currency balance
+* (ETH, SOL, BTC, etc.). For token balances, use
+* {@link getTokenBalances}; for a multi-chain portfolio snapshot, use
+* {@link getMultichainTokenBalances}.
 *
 * @param params.walletAccount - The wallet account to get the balance for.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to an object containing the balance as a string or null.
 * @not-instrumented
 */
-const getBalance = async ({ walletAccount }, client = getDefaultClient()) => {
+const getNativeBalance = async ({ walletAccount }, client = getDefaultClient()) => {
 	const walletProvider = getWalletProviderFromWalletAccount({ walletAccount }, client);
 	const { networkId } = await walletProvider.getActiveNetworkId();
 	return getNetworkProviderFromNetworkId({
@@ -7550,5 +7977,5 @@ const parseUserAgent = ({ userAgent }) => {
 assertPackageVersion(name, version);
 
 //#endregion
-export { BaseError, CheckoutSessionTokenMissingError, ClientAlreadyInitializedError, DeeplinkConnectAndVerifyUnsupportedError, FeeEstimationFailedError, GOOGLE_DRIVE_BACKUP_REQUIRED_SCOPES, InvalidDeviceRegistrationRedirectError, InvalidExternalAuthError, InvalidParamError, InvalidRedirectStorageStateError, InvalidSocialCallbackOriginError, LinkCredentialError, MFAAction, MfaInvalidOtpError, MfaRateLimitedError, MissingRedirectStorageStateError, MissingSocialUrlParamError, MissingUserVerificationError, NetworkAddingUnavailableError, NetworkNotAddedError, NetworkSwitchingUnavailableError, NoAddressFoundError, NoNetworkProvidersError, NoPasskeyCredentialsFoundError, NoSmartWalletAccountSignerFoundError, NoWebAuthNSupportError, NotWaasWalletAccountError, SandboxMaximumThresholdReachedError, SimulationFailedError, TokenSwapError, UnauthorizedError, UnavailableInServerSideError, UnrecognizedNetworkError, UserCancelledSocialPopUpError, UserNotAuthenticatedError, UserRejectedError, WalletAccountAlreadyVerifiedError, WalletAccountNotSelectedError, WalletAlreadyLinkedToAnotherUserError, WalletProviderMethodUnavailableError, __acknowledgeRecoveryCodes_wrapped as acknowledgeRecoveryCodes, addCoinbaseOnrampOrderEventListener, __addNetwork_wrapped as addNetwork, assertWalletAccountSigningAvailability, assertWalletProviderMethodDefined, __attachCheckoutTransactionSource_wrapped as attachCheckoutTransactionSource, authenticateMfaRecoveryCode, authenticatePasskeyMFA, authenticateTotpMfaDevice, __authenticateWithSocial_wrapped as authenticateWithSocial, __broadcastCheckoutTransaction_wrapped as broadcastCheckoutTransaction, canConnectWithHardwareWallet, __cancelCheckoutTransaction_wrapped as cancelCheckoutTransaction, __checkStepUpAuth_wrapped as checkStepUpAuth, __completeDeviceRegistration_wrapped as completeDeviceRegistration, __completeSocialAuthentication_wrapped as completeSocialAuthentication, __completeSocialRedirect_wrapped as completeSocialRedirect, __confirmTransaction_wrapped as confirmTransaction, __connectAndVerifyWithWalletProvider_wrapped as connectAndVerifyWithWalletProvider, __connectWithWalletProvider_wrapped as connectWithWalletProvider, __consumeMfaToken_wrapped as consumeMfaToken, __createCheckoutTransaction_wrapped as createCheckoutTransaction, __createCoinbaseOnrampOrder_wrapped as createCoinbaseOnrampOrder, __createCryptoDotComPayment_wrapped as createCryptoDotComPayment, __createDynamicClient_wrapped as createDynamicClient, __createKrakenExchangeTransfer_wrapped as createKrakenExchangeTransfer, __createNewMfaRecoveryCodes_wrapped as createNewMfaRecoveryCodes, __deleteMfaDevice_wrapped as deleteMfaDevice, __deletePasskey_wrapped as deletePasskey, __deleteUser_wrapped as deleteUser, detectDeviceRegistrationRedirect, detectOAuthRedirect, detectSocialRedirectUrl, excludeInstalledFromCatalog, __executeSwapTransaction_wrapped as executeSwapTransaction, fetchProjectSettings, findMissingGoogleDriveBackupScopes, getActiveNetworkData, getActiveNetworkId, getAvailableWalletProvidersData, getBalance, getBalanceForAddress, getBalances, getCheckoutTransaction, getCheckoutTransactionQuote, getCoinbaseBuyUrl, getConnectedAddresses, getDefaultClient, getDeviceRegistrationTokenFromUrl, __getElevatedAccessToken_wrapped as getElevatedAccessToken, __getGoogleDriveBackupReadiness_wrapped as getGoogleDriveBackupReadiness, getKrakenAccounts, getKrakenWhitelistedAddresses, getMfaDevices, getMfaMethods, getMfaRecoveryCodes, getMissingVerificationForCoinbaseOnrampOrder, getMultichainBalances, getNetworksData, getOwnerWalletAccountForSmartWalletAccount, getPasskeys, getPrimaryWalletAccount, getRegisteredDevices, getSwapQuote, getSwapStatus, getTransactionHistory, getUserSocialAccounts, getWalletAccountAddressByType, getWalletAccountFromAddress, getWalletAccounts, getWalletConnectCatalog, getWalletConnectCatalogWalletByWalletProviderKey, getWalletOptionsCatalogue, getWalletProviderDataByKey, hasAllGoogleDriveBackupScopes, hasExtension, __initializeClient_wrapped as initializeClient, isCaptchaRequired, isDeeplinkWalletProvider, isDeviceRegistrationRequired, isHardwareWalletAccount, isInsufficientGoogleDriveScopesError, isMfaRequiredForAction, isMobile, isPendingRecoveryCodesAcknowledgment, isProgrammaticNetworkSwitchAvailable, isSignedIn, isUserMissingMfaAuth, isUserOnboardingComplete, isWalletAccountVerified, logout, matchWalletProvidersToCatalogGroup, offEvent, offWalletProviderEvent, onEvent, onWalletProviderEvent, onceEvent, parseUserAgent, __prepareCheckoutTransaction_wrapped as prepareCheckoutTransaction, __proveWalletAccountOwnership_wrapped as proveWalletAccountOwnership, __refreshAuth_wrapped as refreshAuth, __refreshUser_wrapped as refreshUser, __registerPasskey_wrapped as registerPasskey, __registerTotpMfaDevice_wrapped as registerTotpMfaDevice, __removeWalletAccount_wrapped as removeWalletAccount, __requestExternalAuthElevatedToken_wrapped as requestExternalAuthElevatedToken, requiresConversion, __revokeAllRegisteredDevices_wrapped as revokeAllRegisteredDevices, __revokeRegisteredDevice_wrapped as revokeRegisteredDevice, __selectPrimaryWalletAccount_wrapped as selectPrimaryWalletAccount, __sendEmailOTP_wrapped as sendEmailOTP, __sendSmsOTP_wrapped as sendSmsOTP, __setCaptchaToken_wrapped as setCaptchaToken, __setDefaultMfaDevice_wrapped as setDefaultMfaDevice, __setInstrumentationEnabled_wrapped as setInstrumentationEnabled, __signInWithExternalJwt_wrapped as signInWithExternalJwt, __signInWithPasskey_wrapped as signInWithPasskey, __signInWithSocialPopUp_wrapped as signInWithSocialPopUp, __signInWithSocialRedirect_wrapped as signInWithSocialRedirect, __signMessage_wrapped as signMessage, __submitCheckoutTransaction_wrapped as submitCheckoutTransaction, supportedCountries, __switchActiveNetwork_wrapped as switchActiveNetwork, trackCheckoutTransaction, __transferAmount_wrapped as transferAmount, __transferWalletAccount_wrapped as transferWalletAccount, __unlinkSocialAccount_wrapped as unlinkSocialAccount, __updateUser_wrapped as updateUser, __verifyOTP_wrapped as verifyOTP, __verifyWalletAccount_wrapped as verifyWalletAccount, waitForClientInitialized };
+export { BaseError, CheckoutSessionTokenMissingError, ClientAlreadyInitializedError, DeeplinkConnectAndVerifyUnsupportedError, FeeEstimationFailedError, GOOGLE_DRIVE_BACKUP_REQUIRED_SCOPES, InvalidDeviceRegistrationRedirectError, InvalidExternalAuthError, InvalidParamError, InvalidRedirectStorageStateError, InvalidSocialCallbackOriginError, LinkCredentialError, MFAAction, MfaInvalidOtpError, MfaRateLimitedError, MissingRedirectStorageStateError, MissingSocialUrlParamError, MissingUserVerificationError, NetworkAddingUnavailableError, NetworkNotAddedError, NetworkSwitchingUnavailableError, NoAddressFoundError, NoNetworkProvidersError, NoPasskeyCredentialsFoundError, NoSmartWalletAccountSignerFoundError, NoWebAuthNSupportError, NotWaasWalletAccountError, SandboxMaximumThresholdReachedError, SimulationFailedError, TokenSwapError, UnauthorizedError, UnavailableInServerSideError, UnrecognizedNetworkError, UserCancelledSocialPopUpError, UserNotAuthenticatedError, UserRejectedError, WalletAccountAlreadyVerifiedError, WalletAccountNotSelectedError, WalletAlreadyLinkedToAnotherUserError, WalletProviderMethodUnavailableError, __acknowledgeRecoveryCodes_wrapped as acknowledgeRecoveryCodes, addCoinbaseOnrampOrderEventListener, __addNetwork_wrapped as addNetwork, appendConnectionUriToDeeplink, assertWalletAccountSigningAvailability, assertWalletProviderMethodDefined, __attachCheckoutTransactionSource_wrapped as attachCheckoutTransactionSource, authenticateMfaRecoveryCode, authenticatePasskeyMFA, authenticateTotpMfaDevice, __authenticateWithSocial_wrapped as authenticateWithSocial, __broadcastCheckoutTransaction_wrapped as broadcastCheckoutTransaction, canConnectWithHardwareWallet, __cancelCheckoutTransaction_wrapped as cancelCheckoutTransaction, __checkStepUpAuth_wrapped as checkStepUpAuth, __completeDeviceRegistration_wrapped as completeDeviceRegistration, __completeSocialAuthentication_wrapped as completeSocialAuthentication, __completeSocialRedirect_wrapped as completeSocialRedirect, __confirmTransaction_wrapped as confirmTransaction, __connectAndVerifyWithWalletProvider_wrapped as connectAndVerifyWithWalletProvider, __connectWithWalletProvider_wrapped as connectWithWalletProvider, __consumeMfaToken_wrapped as consumeMfaToken, __createCheckoutTransaction_wrapped as createCheckoutTransaction, __createCoinbaseOnrampOrder_wrapped as createCoinbaseOnrampOrder, __createCryptoDotComPayment_wrapped as createCryptoDotComPayment, __createDynamicClient_wrapped as createDynamicClient, __createKrakenExchangeTransfer_wrapped as createKrakenExchangeTransfer, __createNewMfaRecoveryCodes_wrapped as createNewMfaRecoveryCodes, __deleteMfaDevice_wrapped as deleteMfaDevice, __deletePasskey_wrapped as deletePasskey, __deleteUser_wrapped as deleteUser, detectDeviceRegistrationRedirect, detectOAuthRedirect, detectSocialRedirectUrl, excludeInstalledFromCatalog, __executeSwapTransaction_wrapped as executeSwapTransaction, fetchProjectSettings, findMissingGoogleDriveBackupScopes, getActiveNetworkData, getActiveNetworkId, getAvailableWalletProvidersData, getNativeBalance as getBalance, getNativeBalance, getBalanceForAddress, getTokenBalances as getBalances, getTokenBalances, getCheckoutTransaction, getCheckoutTransactionQuote, getCoinbaseBuyUrl, getConnectedAddresses, getDefaultClient, getDeviceRegistrationTokenFromUrl, __getElevatedAccessToken_wrapped as getElevatedAccessToken, __getGoogleDriveBackupReadiness_wrapped as getGoogleDriveBackupReadiness, getInstallationLinkForCurrentPlatform, getKrakenAccounts, getKrakenWhitelistedAddresses, getMfaDevices, getMfaMethods, getMfaRecoveryCodes, getMissingVerificationForCoinbaseOnrampOrder, __getMoonPayCurrencies_wrapped as getMoonPayCurrencies, __getMoonPayUrl_wrapped as getMoonPayUrl, getMultichainTokenBalances as getMultichainBalances, getMultichainTokenBalances, getNetworksData, getOwnerWalletAccountForSmartWalletAccount, getPasskeys, getPrimaryWalletAccount, getRegisteredDevices, getSwapQuote, getSwapStatus, getTransactionHistory, getUserSocialAccounts, getWalletAccountAddressByType, getWalletAccountFromAddress, getWalletAccounts, getWalletConnectCatalog, getWalletConnectCatalogWalletByWalletProviderKey, getWalletOptionsCatalogue, getWalletProviderDataByKey, hasAllGoogleDriveBackupScopes, hasExtension, __initializeClient_wrapped as initializeClient, isAnyWalletAccountConnected, isCaptchaRequired, isDeeplinkWalletProvider, isDeviceRegistrationRequired, isHardwareWalletAccount, isInsufficientGoogleDriveScopesError, isMfaRequiredForAction, isMobile, isPendingRecoveryCodesAcknowledgment, isProgrammaticNetworkSwitchAvailable, isSignedIn, isUserMissingMfaAuth, isUserOnboardingComplete, isWalletAccountVerified, logout, matchWalletProvidersToCatalogGroup, offEvent, offWalletProviderEvent, onEvent, onWalletProviderEvent, onceEvent, parseUserAgent, __prepareCheckoutTransaction_wrapped as prepareCheckoutTransaction, __proveWalletAccountOwnership_wrapped as proveWalletAccountOwnership, __refreshAuth_wrapped as refreshAuth, __refreshUser_wrapped as refreshUser, __registerPasskey_wrapped as registerPasskey, __registerTotpMfaDevice_wrapped as registerTotpMfaDevice, __removeWalletAccount_wrapped as removeWalletAccount, __requestExternalAuthElevatedToken_wrapped as requestExternalAuthElevatedToken, requiresConversion, __revokeAllRegisteredDevices_wrapped as revokeAllRegisteredDevices, __revokeRegisteredDevice_wrapped as revokeRegisteredDevice, __selectPrimaryWalletAccount_wrapped as selectPrimaryWalletAccount, __sendEmailOTP_wrapped as sendEmailOTP, __sendSmsOTP_wrapped as sendSmsOTP, __setCaptchaToken_wrapped as setCaptchaToken, __setDefaultMfaDevice_wrapped as setDefaultMfaDevice, __setInstrumentationEnabled_wrapped as setInstrumentationEnabled, __signInWithExternalJwt_wrapped as signInWithExternalJwt, __signInWithPasskey_wrapped as signInWithPasskey, __signInWithSocialPopUp_wrapped as signInWithSocialPopUp, __signInWithSocialRedirect_wrapped as signInWithSocialRedirect, __signMessage_wrapped as signMessage, __submitCheckoutTransaction_wrapped as submitCheckoutTransaction, supportedCountries, __switchActiveNetwork_wrapped as switchActiveNetwork, trackCheckoutTransaction, __transferAmount_wrapped as transferAmount, __transferWalletAccount_wrapped as transferWalletAccount, __unlinkSocialAccount_wrapped as unlinkSocialAccount, __updateUser_wrapped as updateUser, __verifyOTP_wrapped as verifyOTP, __verifyWalletAccount_wrapped as verifyWalletAccount, waitForClientInitialized };
 //# sourceMappingURL=index.esm.js.map