@dynamic-labs-sdk/client 1.30.2 → 1.30.3

package/dist/isDynamicWaasEnabled-CMccs1-6.cjs

@@ -1,136 +0,0 @@
-const require_updateAuthFromVerifyResponse = require('./updateAuthFromVerifyResponse-Dsw-eAro.cjs');
-let _dynamic_labs_sdk_api_core = require("@dynamic-labs/sdk-api-core");
-
-//#region src/modules/user/refreshAuth/refreshAuth.ts
-/**
-* Refreshes the current session's authentication from the server.
-*
-* This rotates the auth token via a full verify call and updates both the
-* token and the user state from the response, returning the raw
-* `VerifyResponse` (which includes the new token). Reach for this when you
-* need a fresh JWT — e.g. before a call that requires a non-expired token.
-*
-* Prefer `refreshUser` when you only need the latest user profile and do not
-* care about rotating the token: it hits the authenticated-user endpoint,
-* touches only the user state, and returns the `SdkUser` directly.
-*
-* @example
-* ```ts
-* const response = await refreshAuth();
-* console.log('Token refreshed:', response.token);
-* ```
-*
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns A promise that resolves to the verify response.
-* @see logout
-* @see refreshUser
-* @instrumented
-*/
-const refreshAuth = async (client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
-	const core = require_updateAuthFromVerifyResponse.getCore(client);
-	const response = await require_updateAuthFromVerifyResponse.createApiClient({}, client).refreshAuth({ environmentId: core.environmentId });
-	require_updateAuthFromVerifyResponse.updateAuthFromVerifyResponse({ response }, client);
-	return response;
-};
-const __refreshAuth_impl = refreshAuth;
-const __refreshAuth_wrapped = require_updateAuthFromVerifyResponse.instrumentFunction({
-	fn: __refreshAuth_impl,
-	functionName: "refreshAuth",
-	getCore: () => {
-		try {
-			return require_updateAuthFromVerifyResponse.getCore(require_updateAuthFromVerifyResponse.getDefaultClient());
-		} catch {
-			return;
-		}
-	}
-});
-
-//#endregion
-//#region src/errors/NotWaasWalletAccountError.ts
-var NotWaasWalletAccountError = class extends require_updateAuthFromVerifyResponse.BaseError {
-	constructor({ walletAddress }) {
-		super({
-			cause: null,
-			code: "not_waas_wallet_account_error",
-			docsUrl: null,
-			name: "NotWaasWalletAccountError",
-			shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`
-		});
-	}
-};
-
-//#endregion
-//#region src/errors/TransactionBroadcastError.ts
-/**
-* Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.
-*
-* @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })
-* @see transactionBroadcastErrorMapper
-* @see broadcastWaasTransaction
-*/
-var TransactionBroadcastError = class extends require_updateAuthFromVerifyResponse.BaseError {
-	attempts;
-	broadcastId;
-	retryable;
-	submissionState;
-	transactionId;
-	constructor({ attempts, broadcastId, cause, code, message, retryable, submissionState, transactionId }) {
-		super({
-			cause,
-			code,
-			docsUrl: null,
-			name: "TransactionBroadcastError",
-			shortMessage: message
-		});
-		this.attempts = attempts;
-		this.broadcastId = broadcastId;
-		this.retryable = retryable;
-		this.submissionState = submissionState;
-		this.transactionId = transactionId;
-	}
-};
-
-//#endregion
-//#region src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts
-/**
-* Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.
-*
-* This function examines the project settings to determine if Dynamic WaaS is
-* enabled in the Dynamic Dashboard or not.
-*
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns True if Dynamic WaaS is enabled, false otherwise.
-* @notInstrumented
-*/
-const isDynamicWaasEnabled = (client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
-	const projectSettings = client.projectSettings;
-	require_updateAuthFromVerifyResponse.assertDefined(projectSettings, "Project settings are not available");
-	return projectSettings.sdk.embeddedWallets?.defaultWalletVersion === _dynamic_labs_sdk_api_core.EmbeddedWalletVersionEnum.V3;
-};
-
-//#endregion
-Object.defineProperty(exports, 'NotWaasWalletAccountError', {
-  enumerable: true,
-  get: function () {
-    return NotWaasWalletAccountError;
-  }
-});
-Object.defineProperty(exports, 'TransactionBroadcastError', {
-  enumerable: true,
-  get: function () {
-    return TransactionBroadcastError;
-  }
-});
-Object.defineProperty(exports, '__refreshAuth_wrapped', {
-  enumerable: true,
-  get: function () {
-    return __refreshAuth_wrapped;
-  }
-});
-Object.defineProperty(exports, 'isDynamicWaasEnabled', {
-  enumerable: true,
-  get: function () {
-    return isDynamicWaasEnabled;
-  }
-});
-//# sourceMappingURL=isDynamicWaasEnabled-CMccs1-6.cjs.map

package/dist/isDynamicWaasEnabled-CMccs1-6.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"isDynamicWaasEnabled-CMccs1-6.cjs","names":["BaseError","BaseError","getDefaultClient","EmbeddedWalletVersionEnum"],"sources":["../src/modules/user/refreshAuth/refreshAuth.ts","../src/errors/NotWaasWalletAccountError.ts","../src/errors/TransactionBroadcastError.ts","../src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts"],"sourcesContent":["import type { VerifyResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { createApiClient } from '../../apiClient';\nimport { updateAuthFromVerifyResponse } from '../../auth/updateAuthFromVerifyResponse';\n\n/**\n * Refreshes the current session's authentication from the server.\n *\n * This rotates the auth token via a full verify call and updates both the\n * token and the user state from the response, returning the raw\n * `VerifyResponse` (which includes the new token). Reach for this when you\n * need a fresh JWT — e.g. before a call that requires a non-expired token.\n *\n * Prefer `refreshUser` when you only need the latest user profile and do not\n * care about rotating the token: it hits the authenticated-user endpoint,\n * touches only the user state, and returns the `SdkUser` directly.\n *\n * @example\n * ```ts\n * const response = await refreshAuth();\n * console.log('Token refreshed:', response.token);\n * ```\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the verify response.\n * @see logout\n * @see refreshUser\n * @instrumented\n */\nexport const refreshAuth = async (\n  client = getDefaultClient()\n): Promise<VerifyResponse> => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const response = await apiClient.refreshAuth({\n    environmentId: core.environmentId,\n  });\n\n  updateAuthFromVerifyResponse({ response }, client);\n\n  return response;\n};\n","import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Error codes that identify why a v3 WaaS transaction broadcast was rejected.\n *\n * @example 'BROADCAST_REJECTED'\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastErrorCode =\n  | 'BROADCAST_IDEMPOTENCY_CONFLICT'\n  | 'BROADCAST_OUTCOME_UNKNOWN'\n  | 'BROADCAST_RATE_LIMITED'\n  | 'BROADCAST_REJECTED'\n  | 'BROADCAST_REQUIRES_RESIGN'\n  | 'BROADCAST_WALLET_INELIGIBLE'\n  | 'INVALID_SIGNED_TRANSACTION'\n  | 'NETWORK_NOT_ENABLED'\n  | 'SIGNED_TRANSACTION_WALLET_MISMATCH'\n  | 'UNSUPPORTED_WAAS_CHAIN';\n\n/**\n * States describing whether the signed transaction reached the chain.\n *\n * @example 'not_submitted'\n * @see TransactionBroadcastError\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastSubmissionState =\n  | 'not_submitted'\n  | 'requires_resign'\n  | 'unknown';\n\ntype TransactionBroadcastErrorParams = {\n  attempts: number;\n  broadcastId: string;\n  cause: Error;\n  code: TransactionBroadcastErrorCode;\n  message: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId?: string;\n};\n\n/**\n * Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.\n *\n * @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport class TransactionBroadcastError extends BaseError {\n  attempts: number;\n  broadcastId: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId: string | undefined;\n\n  constructor({\n    attempts,\n    broadcastId,\n    cause,\n    code,\n    message,\n    retryable,\n    submissionState,\n    transactionId,\n  }: TransactionBroadcastErrorParams) {\n    super({\n      cause,\n      code,\n      docsUrl: null,\n      name: 'TransactionBroadcastError',\n      shortMessage: message,\n    });\n\n    this.attempts = attempts;\n    this.broadcastId = broadcastId;\n    this.retryable = retryable;\n    this.submissionState = submissionState;\n    this.transactionId = transactionId;\n  }\n}\n","import { EmbeddedWalletVersionEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.\n *\n * This function examines the project settings to determine if Dynamic WaaS is\n * enabled in the Dynamic Dashboard or not.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if Dynamic WaaS is enabled, false otherwise.\n * @notInstrumented\n */\nexport const isDynamicWaasEnabled = (client = getDefaultClient()): boolean => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  const embeddedWalletSettings = projectSettings.sdk.embeddedWallets;\n\n  const dynamicWaasIsEnabled =\n    embeddedWalletSettings?.defaultWalletVersion ===\n    EmbeddedWalletVersionEnum.V3;\n\n  return dynamicWaasIsEnabled;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,MAAE,cAAa,OACb,SAAM,uDAAY;CAElB,MAAM,OAAA,6CAAW,OAAM;wBACN,qDAAK,EAAa,EAAA,OAAA,eAGnC,eAAA,KAAA;AAGD,mEAAA,EAAA,UAAA,EAAA,OAAA;;;;;;;;;;;;;;;;;;ACtCD,IAAa,4BAAb,cAA+CA,+CAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC;;;;;;;;;;;;;ACqCN,IAAa,4BAAb,cAA+CC,+CAAU;CACvD;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,UACA,aACA,OACA,MACA,SACA,WACA,iBACA,iBACkC;AAClC,QAAM;GACJ;GACA;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,YAAY;AACjB,OAAK,kBAAkB;AACvB,OAAK,gBAAgB;;;;;;;;;;;;;;;;ACjEzB,MAAa,wBAAwB,SAASC,uDAAkB,KAAc;CAC5E,MAAM,kBAAkB,OAAO;AAE/B,oDAAc,iBAAiB,qCAAqC;AAQpE,QAN+B,gBAAgB,IAAI,iBAGzB,yBACxBC,qDAA0B"}

package/dist/isDynamicWaasEnabled-DSqgpEcX.native.esm.js

@@ -1,113 +0,0 @@
-import { H as createApiClient, St as getCore, ft as assertDefined, h as instrumentFunction, t as updateAuthFromVerifyResponse, vt as getDefaultClient, xt as BaseError } from "./updateAuthFromVerifyResponse-CTvWpZLa.native.esm.js";
-import { EmbeddedWalletVersionEnum } from "@dynamic-labs/sdk-api-core";
-
-//#region src/modules/user/refreshAuth/refreshAuth.ts
-/**
-* Refreshes the current session's authentication from the server.
-*
-* This rotates the auth token via a full verify call and updates both the
-* token and the user state from the response, returning the raw
-* `VerifyResponse` (which includes the new token). Reach for this when you
-* need a fresh JWT — e.g. before a call that requires a non-expired token.
-*
-* Prefer `refreshUser` when you only need the latest user profile and do not
-* care about rotating the token: it hits the authenticated-user endpoint,
-* touches only the user state, and returns the `SdkUser` directly.
-*
-* @example
-* ```ts
-* const response = await refreshAuth();
-* console.log('Token refreshed:', response.token);
-* ```
-*
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns A promise that resolves to the verify response.
-* @see logout
-* @see refreshUser
-* @instrumented
-*/
-const refreshAuth = async (client = getDefaultClient()) => {
-	const core = getCore(client);
-	const response = await createApiClient({}, client).refreshAuth({ environmentId: core.environmentId });
-	updateAuthFromVerifyResponse({ response }, client);
-	return response;
-};
-const __refreshAuth_impl = refreshAuth;
-const __refreshAuth_wrapped = instrumentFunction({
-	fn: __refreshAuth_impl,
-	functionName: "refreshAuth",
-	getCore: () => {
-		try {
-			return getCore(getDefaultClient());
-		} catch {
-			return;
-		}
-	}
-});
-
-//#endregion
-//#region src/errors/NotWaasWalletAccountError.ts
-var NotWaasWalletAccountError = class extends BaseError {
-	constructor({ walletAddress }) {
-		super({
-			cause: null,
-			code: "not_waas_wallet_account_error",
-			docsUrl: null,
-			name: "NotWaasWalletAccountError",
-			shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`
-		});
-	}
-};
-
-//#endregion
-//#region src/errors/TransactionBroadcastError.ts
-/**
-* Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.
-*
-* @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })
-* @see transactionBroadcastErrorMapper
-* @see broadcastWaasTransaction
-*/
-var TransactionBroadcastError = class extends BaseError {
-	attempts;
-	broadcastId;
-	retryable;
-	submissionState;
-	transactionId;
-	constructor({ attempts, broadcastId, cause, code, message, retryable, submissionState, transactionId }) {
-		super({
-			cause,
-			code,
-			docsUrl: null,
-			name: "TransactionBroadcastError",
-			shortMessage: message
-		});
-		this.attempts = attempts;
-		this.broadcastId = broadcastId;
-		this.retryable = retryable;
-		this.submissionState = submissionState;
-		this.transactionId = transactionId;
-	}
-};
-
-//#endregion
-//#region src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts
-/**
-* Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.
-*
-* This function examines the project settings to determine if Dynamic WaaS is
-* enabled in the Dynamic Dashboard or not.
-*
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns True if Dynamic WaaS is enabled, false otherwise.
-* @notInstrumented
-*/
-const isDynamicWaasEnabled = (client = getDefaultClient()) => {
-	const projectSettings = client.projectSettings;
-	assertDefined(projectSettings, "Project settings are not available");
-	return projectSettings.sdk.embeddedWallets?.defaultWalletVersion === EmbeddedWalletVersionEnum.V3;
-};
-
-//#endregion
-export { __refreshAuth_wrapped as i, TransactionBroadcastError as n, NotWaasWalletAccountError as r, isDynamicWaasEnabled as t };
-//# sourceMappingURL=isDynamicWaasEnabled-DSqgpEcX.native.esm.js.map

package/dist/isDynamicWaasEnabled-DSqgpEcX.native.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isDynamicWaasEnabled-DSqgpEcX.native.esm.js","names":[],"sources":["../src/modules/user/refreshAuth/refreshAuth.ts","../src/errors/NotWaasWalletAccountError.ts","../src/errors/TransactionBroadcastError.ts","../src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts"],"sourcesContent":["import type { VerifyResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { createApiClient } from '../../apiClient';\nimport { updateAuthFromVerifyResponse } from '../../auth/updateAuthFromVerifyResponse';\n\n/**\n * Refreshes the current session's authentication from the server.\n *\n * This rotates the auth token via a full verify call and updates both the\n * token and the user state from the response, returning the raw\n * `VerifyResponse` (which includes the new token). Reach for this when you\n * need a fresh JWT — e.g. before a call that requires a non-expired token.\n *\n * Prefer `refreshUser` when you only need the latest user profile and do not\n * care about rotating the token: it hits the authenticated-user endpoint,\n * touches only the user state, and returns the `SdkUser` directly.\n *\n * @example\n * ```ts\n * const response = await refreshAuth();\n * console.log('Token refreshed:', response.token);\n * ```\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the verify response.\n * @see logout\n * @see refreshUser\n * @instrumented\n */\nexport const refreshAuth = async (\n  client = getDefaultClient()\n): Promise<VerifyResponse> => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const response = await apiClient.refreshAuth({\n    environmentId: core.environmentId,\n  });\n\n  updateAuthFromVerifyResponse({ response }, client);\n\n  return response;\n};\n","import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Error codes that identify why a v3 WaaS transaction broadcast was rejected.\n *\n * @example 'BROADCAST_REJECTED'\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastErrorCode =\n  | 'BROADCAST_IDEMPOTENCY_CONFLICT'\n  | 'BROADCAST_OUTCOME_UNKNOWN'\n  | 'BROADCAST_RATE_LIMITED'\n  | 'BROADCAST_REJECTED'\n  | 'BROADCAST_REQUIRES_RESIGN'\n  | 'BROADCAST_WALLET_INELIGIBLE'\n  | 'INVALID_SIGNED_TRANSACTION'\n  | 'NETWORK_NOT_ENABLED'\n  | 'SIGNED_TRANSACTION_WALLET_MISMATCH'\n  | 'UNSUPPORTED_WAAS_CHAIN';\n\n/**\n * States describing whether the signed transaction reached the chain.\n *\n * @example 'not_submitted'\n * @see TransactionBroadcastError\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastSubmissionState =\n  | 'not_submitted'\n  | 'requires_resign'\n  | 'unknown';\n\ntype TransactionBroadcastErrorParams = {\n  attempts: number;\n  broadcastId: string;\n  cause: Error;\n  code: TransactionBroadcastErrorCode;\n  message: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId?: string;\n};\n\n/**\n * Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.\n *\n * @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport class TransactionBroadcastError extends BaseError {\n  attempts: number;\n  broadcastId: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId: string | undefined;\n\n  constructor({\n    attempts,\n    broadcastId,\n    cause,\n    code,\n    message,\n    retryable,\n    submissionState,\n    transactionId,\n  }: TransactionBroadcastErrorParams) {\n    super({\n      cause,\n      code,\n      docsUrl: null,\n      name: 'TransactionBroadcastError',\n      shortMessage: message,\n    });\n\n    this.attempts = attempts;\n    this.broadcastId = broadcastId;\n    this.retryable = retryable;\n    this.submissionState = submissionState;\n    this.transactionId = transactionId;\n  }\n}\n","import { EmbeddedWalletVersionEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.\n *\n * This function examines the project settings to determine if Dynamic WaaS is\n * enabled in the Dynamic Dashboard or not.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if Dynamic WaaS is enabled, false otherwise.\n * @notInstrumented\n */\nexport const isDynamicWaasEnabled = (client = getDefaultClient()): boolean => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  const embeddedWalletSettings = projectSettings.sdk.embeddedWallets;\n\n  const dynamicWaasIsEnabled =\n    embeddedWalletSettings?.defaultWalletVersion ===\n    EmbeddedWalletVersionEnum.V3;\n\n  return dynamicWaasIsEnabled;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,MAAE,cAAa,OACb,SAAM,kBAAY;CAElB,MAAM,OAAA,QAAW,OAAM;wBACN,gBAAK,EAAa,EAAA,OAAA,eAGnC,eAAA,KAAA;AAGD,8BAAA,EAAA,UAAA,EAAA,OAAA;;;;;;;;;;;;;;;;;;ACtCD,IAAa,4BAAb,cAA+C,UAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC;;;;;;;;;;;;;ACqCN,IAAa,4BAAb,cAA+C,UAAU;CACvD;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,UACA,aACA,OACA,MACA,SACA,WACA,iBACA,iBACkC;AAClC,QAAM;GACJ;GACA;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,YAAY;AACjB,OAAK,kBAAkB;AACvB,OAAK,gBAAgB;;;;;;;;;;;;;;;;ACjEzB,MAAa,wBAAwB,SAAS,kBAAkB,KAAc;CAC5E,MAAM,kBAAkB,OAAO;AAE/B,eAAc,iBAAiB,qCAAqC;AAQpE,QAN+B,gBAAgB,IAAI,iBAGzB,yBACxB,0BAA0B"}

package/dist/isDynamicWaasEnabled-DYORq7Jc.esm.js

@@ -1,113 +0,0 @@
-import { K as createApiClient, St as getCore, ft as assertDefined, g as instrumentFunction, t as updateAuthFromVerifyResponse, vt as getDefaultClient, xt as BaseError } from "./updateAuthFromVerifyResponse-BLgNMqwN.esm.js";
-import { EmbeddedWalletVersionEnum } from "@dynamic-labs/sdk-api-core";
-
-//#region src/modules/user/refreshAuth/refreshAuth.ts
-/**
-* Refreshes the current session's authentication from the server.
-*
-* This rotates the auth token via a full verify call and updates both the
-* token and the user state from the response, returning the raw
-* `VerifyResponse` (which includes the new token). Reach for this when you
-* need a fresh JWT — e.g. before a call that requires a non-expired token.
-*
-* Prefer `refreshUser` when you only need the latest user profile and do not
-* care about rotating the token: it hits the authenticated-user endpoint,
-* touches only the user state, and returns the `SdkUser` directly.
-*
-* @example
-* ```ts
-* const response = await refreshAuth();
-* console.log('Token refreshed:', response.token);
-* ```
-*
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns A promise that resolves to the verify response.
-* @see logout
-* @see refreshUser
-* @instrumented
-*/
-const refreshAuth = async (client = getDefaultClient()) => {
-	const core = getCore(client);
-	const response = await createApiClient({}, client).refreshAuth({ environmentId: core.environmentId });
-	updateAuthFromVerifyResponse({ response }, client);
-	return response;
-};
-const __refreshAuth_impl = refreshAuth;
-const __refreshAuth_wrapped = instrumentFunction({
-	fn: __refreshAuth_impl,
-	functionName: "refreshAuth",
-	getCore: () => {
-		try {
-			return getCore(getDefaultClient());
-		} catch {
-			return;
-		}
-	}
-});
-
-//#endregion
-//#region src/errors/NotWaasWalletAccountError.ts
-var NotWaasWalletAccountError = class extends BaseError {
-	constructor({ walletAddress }) {
-		super({
-			cause: null,
-			code: "not_waas_wallet_account_error",
-			docsUrl: null,
-			name: "NotWaasWalletAccountError",
-			shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`
-		});
-	}
-};
-
-//#endregion
-//#region src/errors/TransactionBroadcastError.ts
-/**
-* Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.
-*
-* @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })
-* @see transactionBroadcastErrorMapper
-* @see broadcastWaasTransaction
-*/
-var TransactionBroadcastError = class extends BaseError {
-	attempts;
-	broadcastId;
-	retryable;
-	submissionState;
-	transactionId;
-	constructor({ attempts, broadcastId, cause, code, message, retryable, submissionState, transactionId }) {
-		super({
-			cause,
-			code,
-			docsUrl: null,
-			name: "TransactionBroadcastError",
-			shortMessage: message
-		});
-		this.attempts = attempts;
-		this.broadcastId = broadcastId;
-		this.retryable = retryable;
-		this.submissionState = submissionState;
-		this.transactionId = transactionId;
-	}
-};
-
-//#endregion
-//#region src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts
-/**
-* Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.
-*
-* This function examines the project settings to determine if Dynamic WaaS is
-* enabled in the Dynamic Dashboard or not.
-*
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns True if Dynamic WaaS is enabled, false otherwise.
-* @notInstrumented
-*/
-const isDynamicWaasEnabled = (client = getDefaultClient()) => {
-	const projectSettings = client.projectSettings;
-	assertDefined(projectSettings, "Project settings are not available");
-	return projectSettings.sdk.embeddedWallets?.defaultWalletVersion === EmbeddedWalletVersionEnum.V3;
-};
-
-//#endregion
-export { __refreshAuth_wrapped as i, TransactionBroadcastError as n, NotWaasWalletAccountError as r, isDynamicWaasEnabled as t };
-//# sourceMappingURL=isDynamicWaasEnabled-DYORq7Jc.esm.js.map

package/dist/isDynamicWaasEnabled-DYORq7Jc.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isDynamicWaasEnabled-DYORq7Jc.esm.js","names":[],"sources":["../src/modules/user/refreshAuth/refreshAuth.ts","../src/errors/NotWaasWalletAccountError.ts","../src/errors/TransactionBroadcastError.ts","../src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts"],"sourcesContent":["import type { VerifyResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { createApiClient } from '../../apiClient';\nimport { updateAuthFromVerifyResponse } from '../../auth/updateAuthFromVerifyResponse';\n\n/**\n * Refreshes the current session's authentication from the server.\n *\n * This rotates the auth token via a full verify call and updates both the\n * token and the user state from the response, returning the raw\n * `VerifyResponse` (which includes the new token). Reach for this when you\n * need a fresh JWT — e.g. before a call that requires a non-expired token.\n *\n * Prefer `refreshUser` when you only need the latest user profile and do not\n * care about rotating the token: it hits the authenticated-user endpoint,\n * touches only the user state, and returns the `SdkUser` directly.\n *\n * @example\n * ```ts\n * const response = await refreshAuth();\n * console.log('Token refreshed:', response.token);\n * ```\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the verify response.\n * @see logout\n * @see refreshUser\n * @instrumented\n */\nexport const refreshAuth = async (\n  client = getDefaultClient()\n): Promise<VerifyResponse> => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const response = await apiClient.refreshAuth({\n    environmentId: core.environmentId,\n  });\n\n  updateAuthFromVerifyResponse({ response }, client);\n\n  return response;\n};\n","import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Error codes that identify why a v3 WaaS transaction broadcast was rejected.\n *\n * @example 'BROADCAST_REJECTED'\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastErrorCode =\n  | 'BROADCAST_IDEMPOTENCY_CONFLICT'\n  | 'BROADCAST_OUTCOME_UNKNOWN'\n  | 'BROADCAST_RATE_LIMITED'\n  | 'BROADCAST_REJECTED'\n  | 'BROADCAST_REQUIRES_RESIGN'\n  | 'BROADCAST_WALLET_INELIGIBLE'\n  | 'INVALID_SIGNED_TRANSACTION'\n  | 'NETWORK_NOT_ENABLED'\n  | 'SIGNED_TRANSACTION_WALLET_MISMATCH'\n  | 'UNSUPPORTED_WAAS_CHAIN';\n\n/**\n * States describing whether the signed transaction reached the chain.\n *\n * @example 'not_submitted'\n * @see TransactionBroadcastError\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastSubmissionState =\n  | 'not_submitted'\n  | 'requires_resign'\n  | 'unknown';\n\ntype TransactionBroadcastErrorParams = {\n  attempts: number;\n  broadcastId: string;\n  cause: Error;\n  code: TransactionBroadcastErrorCode;\n  message: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId?: string;\n};\n\n/**\n * Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.\n *\n * @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport class TransactionBroadcastError extends BaseError {\n  attempts: number;\n  broadcastId: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId: string | undefined;\n\n  constructor({\n    attempts,\n    broadcastId,\n    cause,\n    code,\n    message,\n    retryable,\n    submissionState,\n    transactionId,\n  }: TransactionBroadcastErrorParams) {\n    super({\n      cause,\n      code,\n      docsUrl: null,\n      name: 'TransactionBroadcastError',\n      shortMessage: message,\n    });\n\n    this.attempts = attempts;\n    this.broadcastId = broadcastId;\n    this.retryable = retryable;\n    this.submissionState = submissionState;\n    this.transactionId = transactionId;\n  }\n}\n","import { EmbeddedWalletVersionEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.\n *\n * This function examines the project settings to determine if Dynamic WaaS is\n * enabled in the Dynamic Dashboard or not.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if Dynamic WaaS is enabled, false otherwise.\n * @notInstrumented\n */\nexport const isDynamicWaasEnabled = (client = getDefaultClient()): boolean => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  const embeddedWalletSettings = projectSettings.sdk.embeddedWallets;\n\n  const dynamicWaasIsEnabled =\n    embeddedWalletSettings?.defaultWalletVersion ===\n    EmbeddedWalletVersionEnum.V3;\n\n  return dynamicWaasIsEnabled;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,MAAE,cAAa,OACb,SAAM,kBAAY;CAElB,MAAM,OAAA,QAAW,OAAM;wBACN,gBAAK,EAAa,EAAA,OAAA,eAGnC,eAAA,KAAA;AAGD,8BAAA,EAAA,UAAA,EAAA,OAAA;;;;;;;;;;;;;;;;;;ACtCD,IAAa,4BAAb,cAA+C,UAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC;;;;;;;;;;;;;ACqCN,IAAa,4BAAb,cAA+C,UAAU;CACvD;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,UACA,aACA,OACA,MACA,SACA,WACA,iBACA,iBACkC;AAClC,QAAM;GACJ;GACA;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,YAAY;AACjB,OAAK,kBAAkB;AACvB,OAAK,gBAAgB;;;;;;;;;;;;;;;;ACjEzB,MAAa,wBAAwB,SAAS,kBAAkB,KAAc;CAC5E,MAAM,kBAAkB,OAAO;AAE/B,eAAc,iBAAiB,qCAAqC;AAQpE,QAN+B,gBAAgB,IAAI,iBAGzB,yBACxB,0BAA0B"}

package/dist/isMfaRequiredForAction-BcJvy7Gw.native.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isMfaRequiredForAction-BcJvy7Gw.native.esm.js","names":[],"sources":["../src/errors/NativeModuleNotLinkedError.ts","../src/modules/mfa/consumeMfaToken/consumeMfaToken.ts","../src/modules/mfa/getMfaMethods/getMfaMethods.ts","../src/modules/mfa/isMfaRequiredForAction/isMfaRequiredForAction.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NativeModuleNotLinkedErrorParams = {\n  moduleName: string;\n};\n\nexport class NativeModuleNotLinkedError extends BaseError {\n  constructor({ moduleName }: NativeModuleNotLinkedErrorParams) {\n    super({\n      cause: null,\n      code: 'native_module_not_linked_error',\n      details: [\n        `The \"${moduleName}\" TurboModule is not registered with React Native.`,\n        'This usually means the native module was not autolinked into the host app,',\n        'or the app binary was not rebuilt after installing the SDK.',\n        '',\n        'To resolve:',\n        '  1. Ensure \"@dynamic-labs-sdk/client\" is a direct dependency of the app',\n        '     and reinstall (e.g. `pnpm install`).',\n        '  2. Rebuild the native app:',\n        '       iOS:     `cd ios && pod install && cd .. && npx react-native run-ios`',\n        '       Android: `npx react-native run-android`',\n        '       Expo:    `npx expo prebuild --clean` then run the app.',\n        '  3. Confirm autolinking sees the package:',\n        '       `npx expo-modules-autolinking react-native-config --json`',\n      ].join('\\n'),\n      docsUrl: null,\n      name: 'NativeModuleNotLinkedError',\n      shortMessage: `Native TurboModule \"${moduleName}\" is not linked.`,\n    });\n  }\n}\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Consumes and clears the current MFA token from the client state.\n *\n * This function retrieves the MFA token obtained from a successful MFA authentication,\n * and removes it from the client, to prevent it from being used again.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns The MFA token that was consumed.\n * @throws Error if no MFA token is found.\n * @instrumented\n */\nexport const consumeMfaToken = (client = getDefaultClient()): string => {\n  const core = getCore(client);\n\n  const mfaToken = core.state.get().mfaToken;\n\n  assertDefined(mfaToken, 'No MFA token found');\n\n  core.state.set({\n    mfaToken: null,\n  });\n\n  return mfaToken;\n};\n","import type { MFAMethodsResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { createApiClient } from '../../apiClient';\n\n/**\n * Retrieves the available MFA methods for the current user.\n *\n * This function fetches information about which multi-factor authentication\n * methods are available and configured for the user's account.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the user's MFA methods configuration.\n * @notInstrumented\n */\nexport const getMfaMethods = async (\n  client = getDefaultClient()\n): Promise<MFAMethodsResponse> => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const userMfaMethods = await apiClient.getUserMfaMethods({\n    environmentId: core.environmentId,\n    verifiedOnly: true,\n  });\n\n  return userMfaMethods;\n};\n","import type { MFAAction } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { getMfaMethods } from '../getMfaMethods';\n\ntype IsMfaRequiredForActionParams = {\n  mfaAction: MFAAction;\n};\n\n/**\n * Checks if MFA is required for a specific action.\n *\n * This function determines whether multi-factor authentication is required\n * for the specified action based on project settings and user configuration.\n *\n * @param params.mfaAction - The action to check MFA requirements for.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to true if MFA is required for the action, false otherwise.\n * @notInstrumented\n */\nexport const isMfaRequiredForAction = async (\n  { mfaAction }: IsMfaRequiredForActionParams,\n  client = getDefaultClient()\n): Promise<boolean> => {\n  const projectSettings = client.projectSettings;\n\n  const isRequiredForAction = projectSettings?.security?.mfa?.actions?.some(\n    (action) => action.action === mfaAction && action.required\n  );\n\n  // if mfa is not required for the action, return false\n  // no matter if general mfa is set to required or not\n  if (!isRequiredForAction) {\n    return false;\n  }\n\n  const isMfaMethodRequired = projectSettings?.security?.mfa?.required;\n\n  // if mfa is required for the action and also set as required in general, return true\n  if (isMfaMethodRequired) {\n    return true;\n  }\n\n  const mfaMethods = await getMfaMethods(client);\n  // if general mfa is optional, but user has registered methods,\n  // then it should be required for the action\n  return mfaMethods.userHasVerifiedMfaMethods;\n};\n"],"mappings":";;;AAMA,IAAa,6BAAb,cAAgD,UAAU;CACxD,YAAY,EAAE,cAAgD;AAC5D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;IACP,QAAQ,WAAW;IACnB;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD,CAAC,KAAK,KAAK;GACZ,SAAS;GACT,MAAM;GACN,cAAc,uBAAuB,WAAW;GACjD,CAAC;;;;;;;;;;;;;;;;;ACXN,MAAE,mBAAsB,SAAU,kBAAU,KAAA;;;AAK1C,eAAY,UAAI,qBAAA;kBAGhB,UAAO,MACR,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACXD,MAAa,gBAAgB,OAC3B,SAAS,kBAAkB,KACK;CAChC,MAAM,OAAO,QAAQ,OAAO;AAQ5B,QALuB,MAFL,gBAAgB,EAAE,EAAE,OAAO,CAEN,kBAAkB;EACvD,eAAe,KAAK;EACpB,cAAc;EACf,CAAC;;;;;;;;;;;;;;;;ACLJ,MAAa,yBAAyB,OACpC,EAAE,aACF,SAAS,kBAAkB,KACN;CACrB,MAAM,kBAAkB,OAAO;AAQ/B,KAAI,CANwB,iBAAiB,UAAU,KAAK,SAAS,MAClE,WAAW,OAAO,WAAW,aAAa,OAAO,SACnD,CAKC,QAAO;AAMT,KAH4B,iBAAiB,UAAU,KAAK,SAI1D,QAAO;AAMT,SAHmB,MAAM,cAAc,OAAO,EAG5B"}

package/dist/isMfaRequiredForAction-CatS60F6.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isMfaRequiredForAction-CatS60F6.esm.js","names":[],"sources":["../src/modules/mfa/consumeMfaToken/consumeMfaToken.ts","../src/modules/mfa/getMfaMethods/getMfaMethods.ts","../src/modules/mfa/isMfaRequiredForAction/isMfaRequiredForAction.ts"],"sourcesContent":["import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Consumes and clears the current MFA token from the client state.\n *\n * This function retrieves the MFA token obtained from a successful MFA authentication,\n * and removes it from the client, to prevent it from being used again.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns The MFA token that was consumed.\n * @throws Error if no MFA token is found.\n * @instrumented\n */\nexport const consumeMfaToken = (client = getDefaultClient()): string => {\n  const core = getCore(client);\n\n  const mfaToken = core.state.get().mfaToken;\n\n  assertDefined(mfaToken, 'No MFA token found');\n\n  core.state.set({\n    mfaToken: null,\n  });\n\n  return mfaToken;\n};\n","import type { MFAMethodsResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { createApiClient } from '../../apiClient';\n\n/**\n * Retrieves the available MFA methods for the current user.\n *\n * This function fetches information about which multi-factor authentication\n * methods are available and configured for the user's account.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the user's MFA methods configuration.\n * @notInstrumented\n */\nexport const getMfaMethods = async (\n  client = getDefaultClient()\n): Promise<MFAMethodsResponse> => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const userMfaMethods = await apiClient.getUserMfaMethods({\n    environmentId: core.environmentId,\n    verifiedOnly: true,\n  });\n\n  return userMfaMethods;\n};\n","import type { MFAAction } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { getMfaMethods } from '../getMfaMethods';\n\ntype IsMfaRequiredForActionParams = {\n  mfaAction: MFAAction;\n};\n\n/**\n * Checks if MFA is required for a specific action.\n *\n * This function determines whether multi-factor authentication is required\n * for the specified action based on project settings and user configuration.\n *\n * @param params.mfaAction - The action to check MFA requirements for.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to true if MFA is required for the action, false otherwise.\n * @notInstrumented\n */\nexport const isMfaRequiredForAction = async (\n  { mfaAction }: IsMfaRequiredForActionParams,\n  client = getDefaultClient()\n): Promise<boolean> => {\n  const projectSettings = client.projectSettings;\n\n  const isRequiredForAction = projectSettings?.security?.mfa?.actions?.some(\n    (action) => action.action === mfaAction && action.required\n  );\n\n  // if mfa is not required for the action, return false\n  // no matter if general mfa is set to required or not\n  if (!isRequiredForAction) {\n    return false;\n  }\n\n  const isMfaMethodRequired = projectSettings?.security?.mfa?.required;\n\n  // if mfa is required for the action and also set as required in general, return true\n  if (isMfaMethodRequired) {\n    return true;\n  }\n\n  const mfaMethods = await getMfaMethods(client);\n  // if general mfa is optional, but user has registered methods,\n  // then it should be required for the action\n  return mfaMethods.userHasVerifiedMfaMethods;\n};\n"],"mappings":";;;;;;;;;;;;;;AAkBA,MAAE,mBAAsB,SAAU,kBAAU,KAAA;;;AAK1C,eAAY,UAAI,qBAAA;kBAGhB,UAAO,MACR,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACXD,MAAa,gBAAgB,OAC3B,SAAS,kBAAkB,KACK;CAChC,MAAM,OAAO,QAAQ,OAAO;AAQ5B,QALuB,MAFL,gBAAgB,EAAE,EAAE,OAAO,CAEN,kBAAkB;EACvD,eAAe,KAAK;EACpB,cAAc;EACf,CAAC;;;;;;;;;;;;;;;;ACLJ,MAAa,yBAAyB,OACpC,EAAE,aACF,SAAS,kBAAkB,KACN;CACrB,MAAM,kBAAkB,OAAO;AAQ/B,KAAI,CANwB,iBAAiB,UAAU,KAAK,SAAS,MAClE,WAAW,OAAO,WAAW,aAAa,OAAO,SACnD,CAKC,QAAO;AAMT,KAH4B,iBAAiB,UAAU,KAAK,SAI1D,QAAO;AAMT,SAHmB,MAAM,cAAc,OAAO,EAG5B"}

package/dist/isMfaRequiredForAction-DKfoMhEk.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"isMfaRequiredForAction-DKfoMhEk.cjs","names":["getDefaultClient","getCore","createApiClient","getDefaultClient"],"sources":["../src/modules/mfa/consumeMfaToken/consumeMfaToken.ts","../src/modules/mfa/getMfaMethods/getMfaMethods.ts","../src/modules/mfa/isMfaRequiredForAction/isMfaRequiredForAction.ts"],"sourcesContent":["import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Consumes and clears the current MFA token from the client state.\n *\n * This function retrieves the MFA token obtained from a successful MFA authentication,\n * and removes it from the client, to prevent it from being used again.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns The MFA token that was consumed.\n * @throws Error if no MFA token is found.\n * @instrumented\n */\nexport const consumeMfaToken = (client = getDefaultClient()): string => {\n  const core = getCore(client);\n\n  const mfaToken = core.state.get().mfaToken;\n\n  assertDefined(mfaToken, 'No MFA token found');\n\n  core.state.set({\n    mfaToken: null,\n  });\n\n  return mfaToken;\n};\n","import type { MFAMethodsResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { createApiClient } from '../../apiClient';\n\n/**\n * Retrieves the available MFA methods for the current user.\n *\n * This function fetches information about which multi-factor authentication\n * methods are available and configured for the user's account.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the user's MFA methods configuration.\n * @notInstrumented\n */\nexport const getMfaMethods = async (\n  client = getDefaultClient()\n): Promise<MFAMethodsResponse> => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const userMfaMethods = await apiClient.getUserMfaMethods({\n    environmentId: core.environmentId,\n    verifiedOnly: true,\n  });\n\n  return userMfaMethods;\n};\n","import type { MFAAction } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { getMfaMethods } from '../getMfaMethods';\n\ntype IsMfaRequiredForActionParams = {\n  mfaAction: MFAAction;\n};\n\n/**\n * Checks if MFA is required for a specific action.\n *\n * This function determines whether multi-factor authentication is required\n * for the specified action based on project settings and user configuration.\n *\n * @param params.mfaAction - The action to check MFA requirements for.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to true if MFA is required for the action, false otherwise.\n * @notInstrumented\n */\nexport const isMfaRequiredForAction = async (\n  { mfaAction }: IsMfaRequiredForActionParams,\n  client = getDefaultClient()\n): Promise<boolean> => {\n  const projectSettings = client.projectSettings;\n\n  const isRequiredForAction = projectSettings?.security?.mfa?.actions?.some(\n    (action) => action.action === mfaAction && action.required\n  );\n\n  // if mfa is not required for the action, return false\n  // no matter if general mfa is set to required or not\n  if (!isRequiredForAction) {\n    return false;\n  }\n\n  const isMfaMethodRequired = projectSettings?.security?.mfa?.required;\n\n  // if mfa is required for the action and also set as required in general, return true\n  if (isMfaMethodRequired) {\n    return true;\n  }\n\n  const mfaMethods = await getMfaMethods(client);\n  // if general mfa is optional, but user has registered methods,\n  // then it should be required for the action\n  return mfaMethods.userHasVerifiedMfaMethods;\n};\n"],"mappings":";;;;;;;;;;;;;;AAkBA,MAAE,mBAAsB,SAAU,uDAAU,KAAA;;;AAK1C,oDAAY,UAAI,qBAAA;kBAGhB,UAAO,MACR,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACXD,MAAa,gBAAgB,OAC3B,SAASA,uDAAkB,KACK;CAChC,MAAM,OAAOC,6CAAQ,OAAO;AAQ5B,QALuB,MAFLC,qDAAgB,EAAE,EAAE,OAAO,CAEN,kBAAkB;EACvD,eAAe,KAAK;EACpB,cAAc;EACf,CAAC;;;;;;;;;;;;;;;;ACLJ,MAAa,yBAAyB,OACpC,EAAE,aACF,SAASC,uDAAkB,KACN;CACrB,MAAM,kBAAkB,OAAO;AAQ/B,KAAI,CANwB,iBAAiB,UAAU,KAAK,SAAS,MAClE,WAAW,OAAO,WAAW,aAAa,OAAO,SACnD,CAKC,QAAO;AAMT,KAH4B,iBAAiB,UAAU,KAAK,SAI1D,QAAO;AAMT,SAHmB,MAAM,cAAc,OAAO,EAG5B"}

package/dist/isUserOnboardingComplete-BWVuE4Jg.native.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isUserOnboardingComplete-BWVuE4Jg.native.esm.js","names":["preconnectWaasIframe"],"sources":["../src/errors/WaasLoadFailedError.ts","../src/errors/WaasOnboardingIncompleteError.ts","../src/modules/waas/preconnectWaasIframe/preconnectWaasIframe.ts","../src/modules/deviceRegistration/isDeviceRegistrationRequired/isDeviceRegistrationRequired.ts","../src/modules/mfa/isPendingRecoveryCodesAcknowledgment/isPendingRecoveryCodesAcknowledgment.ts","../src/modules/user/isUserOnboardingComplete/isUserOnboardingComplete.ts"],"sourcesContent":["import { BaseError } from './base';\n\n/**\n * Why the embedded wallet load failed. Currently only retry exhaustion is\n * reported; the union exists so new reasons can be added without a breaking\n * change to consumer `instanceof` handling.\n *\n * @example\n * ```ts\n * const reason: WaasLoadFailedErrorReason = 'load_attempts_exhausted';\n * ```\n * @see WaasLoadFailedError\n * @see signMessage\n */\nexport type WaasLoadFailedErrorReason = 'load_attempts_exhausted';\n\n/**\n * Thrown when the embedded (WaaS) wallet's secure container failed to load\n * after exhausting all of its internal retry attempts.\n *\n * This failure is transient: the next wallet operation triggers a fresh load\n * cycle, so hosts can catch this error and re-attempt the operation at their\n * own cadence (for example, when connectivity returns or the app is\n * foregrounded). Other load failures (for example, a CSP block) are not\n * wrapped by this error and their shape is not guaranteed.\n *\n * @example\n * ```ts\n * try {\n *   await signMessage({ message, walletAccount });\n * } catch (error) {\n *   if (error instanceof WaasLoadFailedError) {\n *     // transient — retry the operation at your own cadence\n *     await signMessage({ message, walletAccount });\n *   }\n * }\n * ```\n * @see WaasLoadFailedErrorReason\n * @see signMessage\n */\nexport class WaasLoadFailedError extends BaseError {\n  readonly reason: WaasLoadFailedErrorReason;\n\n  constructor({ cause }: { cause: Error }) {\n    super({\n      cause,\n      code: 'waas_load_failed',\n      docsUrl: null,\n      name: 'WaasLoadFailedError',\n      shortMessage:\n        'The embedded wallet failed to load after exhausting its retry attempts. Retrying the wallet operation triggers a fresh load.',\n    });\n    this.reason = 'load_attempts_exhausted';\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Thrown when the embedded (WaaS) wallet client is requested before the user\n * has completed onboarding — i.e. the JWT has not upgraded to `user:basic`\n * because MFA, KYC, recovery-codes acknowledgment, or device registration is\n * still pending.\n *\n * The WaaS iframe's init-time room-cache pre-warm fires `createRooms` using the\n * token captured at client construction (before any per-operation token\n * resync). Building the client during this window lets that pre-warm fire with\n * a pre-`user:basic` token, get a 401, and the iframe's unauthorized handler\n * force-logs-out the user. Throwing here surfaces a clear, recoverable reason\n * instead — wait for onboarding to complete and retry.\n */\nexport class WaasOnboardingIncompleteError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'waas_onboarding_incomplete',\n      docsUrl: null,\n      name: 'WaasOnboardingIncompleteError',\n      shortMessage:\n        'Cannot create or access the embedded wallet until onboarding is complete (pending MFA, KYC, recovery-codes acknowledgment, or device registration).',\n    });\n  }\n}\n","import type { AuthMode } from '@dynamic-labs-wallet/browser-wallet-client';\nimport { preconnectWaasIframe as preconnectWaasIframeOrigin } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { DEFAULT_WAAS_BASE_API_URL } from '../constants';\nimport { isDynamicWaasEnabled } from '../isDynamicWaasEnabled';\n\n/**\n * Warms the browser's connection (DNS + TCP + TLS) to the embedded-wallet\n * iframe origin so the iframe mounted after authentication completes loads on\n * a hot connection. Called when an auth flow starts (OTP send/verify, social\n * callback). Safe to call repeatedly; no-op on React Native / SSR and when\n * Dynamic WaaS is not enabled.\n *\n * @param client - The Dynamic client instance.\n * @notInstrumented\n */\nexport const preconnectWaasIframe = (client: DynamicClient): void => {\n  const core = getCore(client);\n  try {\n    if (!isDynamicWaasEnabled(client)) return;\n\n    preconnectWaasIframeOrigin({\n      authMode: (isCookieEnabled(client) ? 'cookie' : 'header') as AuthMode,\n      baseApiUrl: (core.apiBaseUrl || DEFAULT_WAAS_BASE_API_URL).replace(\n        '/api/v0',\n        ''\n      ),\n    });\n  } catch (error) {\n    // Best-effort: never break the auth flow (also swallows the assertion\n    // from isDynamicWaasEnabled when project settings are not loaded yet).\n    core.logger.warn('[preconnectWaasIframe] skipped', error);\n  }\n};\n","import type { User } from '../../user/user.types';\n\n/**\n * Checks if device registration is required for the given user.\n *\n * This function determines if the user has the deviceRegistration\n * scope, indicating that device registration is required.\n *\n * @param user - The user to check.\n * @returns True if device registration is required, false otherwise.\n * @notInstrumented\n * @hook Exposed as a hook so consumers reactively know when this device must be registered, updated when the user changes.\n */\nexport const isDeviceRegistrationRequired = (user: User): boolean =>\n  Boolean(user.scope?.includes('device:register'));\n","import { MfaBackupCodeAcknowledgement } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if the user is still pending acknowledgment of their MFA recovery codes.\n *\n * This function determines whether the user has been presented with recovery\n * codes that they have not yet acknowledged as saved or backed up.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if recovery codes are pending acknowledgment, false otherwise.\n * @notInstrumented\n * @hook Exposed as a hook so consumers reactively know when recovery codes await acknowledgment, updated when the user changes.\n */\nexport const isPendingRecoveryCodesAcknowledgment = (\n  client = getDefaultClient()\n): boolean => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  return (\n    user.mfaBackupCodeAcknowledgement === MfaBackupCodeAcknowledgement.Pending\n  );\n};\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { isDeviceRegistrationRequired } from '../../deviceRegistration/isDeviceRegistrationRequired';\nimport { isPendingRecoveryCodesAcknowledgment } from '../../mfa/isPendingRecoveryCodesAcknowledgment';\nimport { isUserMissingMfaAuth } from '../../mfa/isUserMissingMfaAuth';\n\n/**\n * Checks if the user has completed all onboarding requirements.\n *\n * This function verifies whether a user has fulfilled all necessary requirements\n * including KYC fields (Know Your Customer information), MFA setup\n * (Multi-Factor Authentication including recovery codes acknowledgment), and\n * device registration.\n *\n * A `false` result means the user still has an outstanding onboarding step, so\n * any feature that requires a fully onboarded (`user:basic`) user should hold\n * off until it returns `true`. Creating or accessing an embedded (WaaS) wallet\n * is one such feature — its backend calls reject a pre-`user:basic` token — but\n * this predicate is general and not specific to embedded wallets.\n *\n * @deprecated Use {@link checkUserScopes} instead. This function conflates\n * Dynamic-controlled requirements (MFA, device registration, required fields)\n * with the concept of \"onboarding complete\", which is app-specific. Replace\n * with `checkUserScopes({ user, scopes: ['user:basic'] })` to check whether\n * Dynamic's requirements are satisfied, and compose your own logic on top for\n * any app-specific onboarding steps.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if onboarding is complete (no pending requirements), false if there are pending requirements.\n * @notInstrumented\n * @hook Exposed as a hook so consumers reactively know when onboarding is complete, updated when the user changes.\n */\nexport const isUserOnboardingComplete = (\n  client = getDefaultClient()\n): boolean => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  const hasMissingKycFields = Boolean(user.missingFields?.length);\n  const hasPendingMfaAuth = isUserMissingMfaAuth(client);\n  const hasPendingRecoveryCodes = isPendingRecoveryCodesAcknowledgment(client);\n  const hasPendingDeviceRegistration = isDeviceRegistrationRequired(user);\n\n  const userOnboardingComplete =\n    !hasMissingKycFields &&\n    !hasPendingMfaAuth &&\n    !hasPendingRecoveryCodes &&\n    !hasPendingDeviceRegistration;\n\n  return userOnboardingComplete;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,IAAa,sBAAb,cAAyC,UAAU;CACjD,AAAS;CAET,YAAY,EAAE,SAA2B;AACvC,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;AACF,OAAK,SAAS;;;;;;;;;;;;;;;;;;;ACrClB,IAAa,gCAAb,cAAmD,UAAU;CAC3D,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;;;;;;;;;;;ACLN,MAAaA,0BAAwB,WAAgC;CACnE,MAAM,OAAO,QAAQ,OAAO;AAC5B,KAAI;AACF,MAAI,CAAC,qBAAqB,OAAO,CAAE;AAEnC,uBAA2B;GACzB,UAAW,gBAAgB,OAAO,GAAG,WAAW;GAChD,aAAa,KAAK,cAAc,2BAA2B,QACzD,WACA,GACD;GACF,CAAC;UACK,OAAO;AAGd,OAAK,OAAO,KAAK,kCAAkC,MAAM;;;;;;;;;;;;;;;;;ACrB7D,MAAa,gCAAgC,SAC3C,QAAQ,KAAK,OAAO,SAAS,kBAAkB,CAAC;;;;;;;;;;;;;;;ACElD,MAAa,wCACX,SAAS,kBAAkB,KACf;CACZ,MAAM,OAAO,OAAO;AAEpB,eAAc,MAAM,qBAAqB;AAEzC,QACE,KAAK,iCAAiC,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACQvE,MAAa,4BACX,SAAS,kBAAkB,KACf;CACZ,MAAM,OAAO,OAAO;AAEpB,eAAc,MAAM,qBAAqB;CAEzC,MAAM,sBAAsB,QAAQ,KAAK,eAAe,OAAO;CAC/D,MAAM,oBAAoB,qBAAqB,OAAO;CACtD,MAAM,0BAA0B,qCAAqC,OAAO;CAC5E,MAAM,+BAA+B,6BAA6B,KAAK;AAQvE,QALE,CAAC,uBACD,CAAC,qBACD,CAAC,2BACD,CAAC"}

package/dist/isUserOnboardingComplete-jkAQQVdP.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isUserOnboardingComplete-jkAQQVdP.esm.js","names":["preconnectWaasIframe"],"sources":["../src/errors/WaasLoadFailedError.ts","../src/errors/WaasOnboardingIncompleteError.ts","../src/modules/waas/preconnectWaasIframe/preconnectWaasIframe.ts","../src/modules/deviceRegistration/isDeviceRegistrationRequired/isDeviceRegistrationRequired.ts","../src/modules/mfa/isPendingRecoveryCodesAcknowledgment/isPendingRecoveryCodesAcknowledgment.ts","../src/modules/user/isUserOnboardingComplete/isUserOnboardingComplete.ts"],"sourcesContent":["import { BaseError } from './base';\n\n/**\n * Why the embedded wallet load failed. Currently only retry exhaustion is\n * reported; the union exists so new reasons can be added without a breaking\n * change to consumer `instanceof` handling.\n *\n * @example\n * ```ts\n * const reason: WaasLoadFailedErrorReason = 'load_attempts_exhausted';\n * ```\n * @see WaasLoadFailedError\n * @see signMessage\n */\nexport type WaasLoadFailedErrorReason = 'load_attempts_exhausted';\n\n/**\n * Thrown when the embedded (WaaS) wallet's secure container failed to load\n * after exhausting all of its internal retry attempts.\n *\n * This failure is transient: the next wallet operation triggers a fresh load\n * cycle, so hosts can catch this error and re-attempt the operation at their\n * own cadence (for example, when connectivity returns or the app is\n * foregrounded). Other load failures (for example, a CSP block) are not\n * wrapped by this error and their shape is not guaranteed.\n *\n * @example\n * ```ts\n * try {\n *   await signMessage({ message, walletAccount });\n * } catch (error) {\n *   if (error instanceof WaasLoadFailedError) {\n *     // transient — retry the operation at your own cadence\n *     await signMessage({ message, walletAccount });\n *   }\n * }\n * ```\n * @see WaasLoadFailedErrorReason\n * @see signMessage\n */\nexport class WaasLoadFailedError extends BaseError {\n  readonly reason: WaasLoadFailedErrorReason;\n\n  constructor({ cause }: { cause: Error }) {\n    super({\n      cause,\n      code: 'waas_load_failed',\n      docsUrl: null,\n      name: 'WaasLoadFailedError',\n      shortMessage:\n        'The embedded wallet failed to load after exhausting its retry attempts. Retrying the wallet operation triggers a fresh load.',\n    });\n    this.reason = 'load_attempts_exhausted';\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Thrown when the embedded (WaaS) wallet client is requested before the user\n * has completed onboarding — i.e. the JWT has not upgraded to `user:basic`\n * because MFA, KYC, recovery-codes acknowledgment, or device registration is\n * still pending.\n *\n * The WaaS iframe's init-time room-cache pre-warm fires `createRooms` using the\n * token captured at client construction (before any per-operation token\n * resync). Building the client during this window lets that pre-warm fire with\n * a pre-`user:basic` token, get a 401, and the iframe's unauthorized handler\n * force-logs-out the user. Throwing here surfaces a clear, recoverable reason\n * instead — wait for onboarding to complete and retry.\n */\nexport class WaasOnboardingIncompleteError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'waas_onboarding_incomplete',\n      docsUrl: null,\n      name: 'WaasOnboardingIncompleteError',\n      shortMessage:\n        'Cannot create or access the embedded wallet until onboarding is complete (pending MFA, KYC, recovery-codes acknowledgment, or device registration).',\n    });\n  }\n}\n","import type { AuthMode } from '@dynamic-labs-wallet/browser-wallet-client';\nimport { preconnectWaasIframe as preconnectWaasIframeOrigin } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { DEFAULT_WAAS_BASE_API_URL } from '../constants';\nimport { isDynamicWaasEnabled } from '../isDynamicWaasEnabled';\n\n/**\n * Warms the browser's connection (DNS + TCP + TLS) to the embedded-wallet\n * iframe origin so the iframe mounted after authentication completes loads on\n * a hot connection. Called when an auth flow starts (OTP send/verify, social\n * callback). Safe to call repeatedly; no-op on React Native / SSR and when\n * Dynamic WaaS is not enabled.\n *\n * @param client - The Dynamic client instance.\n * @notInstrumented\n */\nexport const preconnectWaasIframe = (client: DynamicClient): void => {\n  const core = getCore(client);\n  try {\n    if (!isDynamicWaasEnabled(client)) return;\n\n    preconnectWaasIframeOrigin({\n      authMode: (isCookieEnabled(client) ? 'cookie' : 'header') as AuthMode,\n      baseApiUrl: (core.apiBaseUrl || DEFAULT_WAAS_BASE_API_URL).replace(\n        '/api/v0',\n        ''\n      ),\n    });\n  } catch (error) {\n    // Best-effort: never break the auth flow (also swallows the assertion\n    // from isDynamicWaasEnabled when project settings are not loaded yet).\n    core.logger.warn('[preconnectWaasIframe] skipped', error);\n  }\n};\n","import type { User } from '../../user/user.types';\n\n/**\n * Checks if device registration is required for the given user.\n *\n * This function determines if the user has the deviceRegistration\n * scope, indicating that device registration is required.\n *\n * @param user - The user to check.\n * @returns True if device registration is required, false otherwise.\n * @notInstrumented\n * @hook Exposed as a hook so consumers reactively know when this device must be registered, updated when the user changes.\n */\nexport const isDeviceRegistrationRequired = (user: User): boolean =>\n  Boolean(user.scope?.includes('device:register'));\n","import { MfaBackupCodeAcknowledgement } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if the user is still pending acknowledgment of their MFA recovery codes.\n *\n * This function determines whether the user has been presented with recovery\n * codes that they have not yet acknowledged as saved or backed up.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if recovery codes are pending acknowledgment, false otherwise.\n * @notInstrumented\n * @hook Exposed as a hook so consumers reactively know when recovery codes await acknowledgment, updated when the user changes.\n */\nexport const isPendingRecoveryCodesAcknowledgment = (\n  client = getDefaultClient()\n): boolean => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  return (\n    user.mfaBackupCodeAcknowledgement === MfaBackupCodeAcknowledgement.Pending\n  );\n};\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { isDeviceRegistrationRequired } from '../../deviceRegistration/isDeviceRegistrationRequired';\nimport { isPendingRecoveryCodesAcknowledgment } from '../../mfa/isPendingRecoveryCodesAcknowledgment';\nimport { isUserMissingMfaAuth } from '../../mfa/isUserMissingMfaAuth';\n\n/**\n * Checks if the user has completed all onboarding requirements.\n *\n * This function verifies whether a user has fulfilled all necessary requirements\n * including KYC fields (Know Your Customer information), MFA setup\n * (Multi-Factor Authentication including recovery codes acknowledgment), and\n * device registration.\n *\n * A `false` result means the user still has an outstanding onboarding step, so\n * any feature that requires a fully onboarded (`user:basic`) user should hold\n * off until it returns `true`. Creating or accessing an embedded (WaaS) wallet\n * is one such feature — its backend calls reject a pre-`user:basic` token — but\n * this predicate is general and not specific to embedded wallets.\n *\n * @deprecated Use {@link checkUserScopes} instead. This function conflates\n * Dynamic-controlled requirements (MFA, device registration, required fields)\n * with the concept of \"onboarding complete\", which is app-specific. Replace\n * with `checkUserScopes({ user, scopes: ['user:basic'] })` to check whether\n * Dynamic's requirements are satisfied, and compose your own logic on top for\n * any app-specific onboarding steps.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if onboarding is complete (no pending requirements), false if there are pending requirements.\n * @notInstrumented\n * @hook Exposed as a hook so consumers reactively know when onboarding is complete, updated when the user changes.\n */\nexport const isUserOnboardingComplete = (\n  client = getDefaultClient()\n): boolean => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  const hasMissingKycFields = Boolean(user.missingFields?.length);\n  const hasPendingMfaAuth = isUserMissingMfaAuth(client);\n  const hasPendingRecoveryCodes = isPendingRecoveryCodesAcknowledgment(client);\n  const hasPendingDeviceRegistration = isDeviceRegistrationRequired(user);\n\n  const userOnboardingComplete =\n    !hasMissingKycFields &&\n    !hasPendingMfaAuth &&\n    !hasPendingRecoveryCodes &&\n    !hasPendingDeviceRegistration;\n\n  return userOnboardingComplete;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,IAAa,sBAAb,cAAyC,UAAU;CACjD,AAAS;CAET,YAAY,EAAE,SAA2B;AACvC,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;AACF,OAAK,SAAS;;;;;;;;;;;;;;;;;;;ACrClB,IAAa,gCAAb,cAAmD,UAAU;CAC3D,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;;;;;;;;;;;ACLN,MAAaA,0BAAwB,WAAgC;CACnE,MAAM,OAAO,QAAQ,OAAO;AAC5B,KAAI;AACF,MAAI,CAAC,qBAAqB,OAAO,CAAE;AAEnC,uBAA2B;GACzB,UAAW,gBAAgB,OAAO,GAAG,WAAW;GAChD,aAAa,KAAK,cAAc,2BAA2B,QACzD,WACA,GACD;GACF,CAAC;UACK,OAAO;AAGd,OAAK,OAAO,KAAK,kCAAkC,MAAM;;;;;;;;;;;;;;;;;ACrB7D,MAAa,gCAAgC,SAC3C,QAAQ,KAAK,OAAO,SAAS,kBAAkB,CAAC;;;;;;;;;;;;;;;ACElD,MAAa,wCACX,SAAS,kBAAkB,KACf;CACZ,MAAM,OAAO,OAAO;AAEpB,eAAc,MAAM,qBAAqB;AAEzC,QACE,KAAK,iCAAiC,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACQvE,MAAa,4BACX,SAAS,kBAAkB,KACf;CACZ,MAAM,OAAO,OAAO;AAEpB,eAAc,MAAM,qBAAqB;CAEzC,MAAM,sBAAsB,QAAQ,KAAK,eAAe,OAAO;CAC/D,MAAM,oBAAoB,qBAAqB,OAAO;CACtD,MAAM,0BAA0B,qCAAqC,OAAO;CAC5E,MAAM,+BAA+B,6BAA6B,KAAK;AAQvE,QALE,CAAC,uBACD,CAAC,qBACD,CAAC,2BACD,CAAC"}

package/dist/isUserOnboardingComplete-jv_idxWY.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"isUserOnboardingComplete-jv_idxWY.cjs","names":["BaseError","BaseError","getCore","isDynamicWaasEnabled","isCookieEnabled","DEFAULT_WAAS_BASE_API_URL","getDefaultClient","MfaBackupCodeAcknowledgement","getDefaultClient","isUserMissingMfaAuth"],"sources":["../src/errors/WaasLoadFailedError.ts","../src/errors/WaasOnboardingIncompleteError.ts","../src/modules/waas/preconnectWaasIframe/preconnectWaasIframe.ts","../src/modules/deviceRegistration/isDeviceRegistrationRequired/isDeviceRegistrationRequired.ts","../src/modules/mfa/isPendingRecoveryCodesAcknowledgment/isPendingRecoveryCodesAcknowledgment.ts","../src/modules/user/isUserOnboardingComplete/isUserOnboardingComplete.ts"],"sourcesContent":["import { BaseError } from './base';\n\n/**\n * Why the embedded wallet load failed. Currently only retry exhaustion is\n * reported; the union exists so new reasons can be added without a breaking\n * change to consumer `instanceof` handling.\n *\n * @example\n * ```ts\n * const reason: WaasLoadFailedErrorReason = 'load_attempts_exhausted';\n * ```\n * @see WaasLoadFailedError\n * @see signMessage\n */\nexport type WaasLoadFailedErrorReason = 'load_attempts_exhausted';\n\n/**\n * Thrown when the embedded (WaaS) wallet's secure container failed to load\n * after exhausting all of its internal retry attempts.\n *\n * This failure is transient: the next wallet operation triggers a fresh load\n * cycle, so hosts can catch this error and re-attempt the operation at their\n * own cadence (for example, when connectivity returns or the app is\n * foregrounded). Other load failures (for example, a CSP block) are not\n * wrapped by this error and their shape is not guaranteed.\n *\n * @example\n * ```ts\n * try {\n *   await signMessage({ message, walletAccount });\n * } catch (error) {\n *   if (error instanceof WaasLoadFailedError) {\n *     // transient — retry the operation at your own cadence\n *     await signMessage({ message, walletAccount });\n *   }\n * }\n * ```\n * @see WaasLoadFailedErrorReason\n * @see signMessage\n */\nexport class WaasLoadFailedError extends BaseError {\n  readonly reason: WaasLoadFailedErrorReason;\n\n  constructor({ cause }: { cause: Error }) {\n    super({\n      cause,\n      code: 'waas_load_failed',\n      docsUrl: null,\n      name: 'WaasLoadFailedError',\n      shortMessage:\n        'The embedded wallet failed to load after exhausting its retry attempts. Retrying the wallet operation triggers a fresh load.',\n    });\n    this.reason = 'load_attempts_exhausted';\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Thrown when the embedded (WaaS) wallet client is requested before the user\n * has completed onboarding — i.e. the JWT has not upgraded to `user:basic`\n * because MFA, KYC, recovery-codes acknowledgment, or device registration is\n * still pending.\n *\n * The WaaS iframe's init-time room-cache pre-warm fires `createRooms` using the\n * token captured at client construction (before any per-operation token\n * resync). Building the client during this window lets that pre-warm fire with\n * a pre-`user:basic` token, get a 401, and the iframe's unauthorized handler\n * force-logs-out the user. Throwing here surfaces a clear, recoverable reason\n * instead — wait for onboarding to complete and retry.\n */\nexport class WaasOnboardingIncompleteError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'waas_onboarding_incomplete',\n      docsUrl: null,\n      name: 'WaasOnboardingIncompleteError',\n      shortMessage:\n        'Cannot create or access the embedded wallet until onboarding is complete (pending MFA, KYC, recovery-codes acknowledgment, or device registration).',\n    });\n  }\n}\n","import type { AuthMode } from '@dynamic-labs-wallet/browser-wallet-client';\nimport { preconnectWaasIframe as preconnectWaasIframeOrigin } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { DEFAULT_WAAS_BASE_API_URL } from '../constants';\nimport { isDynamicWaasEnabled } from '../isDynamicWaasEnabled';\n\n/**\n * Warms the browser's connection (DNS + TCP + TLS) to the embedded-wallet\n * iframe origin so the iframe mounted after authentication completes loads on\n * a hot connection. Called when an auth flow starts (OTP send/verify, social\n * callback). Safe to call repeatedly; no-op on React Native / SSR and when\n * Dynamic WaaS is not enabled.\n *\n * @param client - The Dynamic client instance.\n * @notInstrumented\n */\nexport const preconnectWaasIframe = (client: DynamicClient): void => {\n  const core = getCore(client);\n  try {\n    if (!isDynamicWaasEnabled(client)) return;\n\n    preconnectWaasIframeOrigin({\n      authMode: (isCookieEnabled(client) ? 'cookie' : 'header') as AuthMode,\n      baseApiUrl: (core.apiBaseUrl || DEFAULT_WAAS_BASE_API_URL).replace(\n        '/api/v0',\n        ''\n      ),\n    });\n  } catch (error) {\n    // Best-effort: never break the auth flow (also swallows the assertion\n    // from isDynamicWaasEnabled when project settings are not loaded yet).\n    core.logger.warn('[preconnectWaasIframe] skipped', error);\n  }\n};\n","import type { User } from '../../user/user.types';\n\n/**\n * Checks if device registration is required for the given user.\n *\n * This function determines if the user has the deviceRegistration\n * scope, indicating that device registration is required.\n *\n * @param user - The user to check.\n * @returns True if device registration is required, false otherwise.\n * @notInstrumented\n * @hook Exposed as a hook so consumers reactively know when this device must be registered, updated when the user changes.\n */\nexport const isDeviceRegistrationRequired = (user: User): boolean =>\n  Boolean(user.scope?.includes('device:register'));\n","import { MfaBackupCodeAcknowledgement } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if the user is still pending acknowledgment of their MFA recovery codes.\n *\n * This function determines whether the user has been presented with recovery\n * codes that they have not yet acknowledged as saved or backed up.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if recovery codes are pending acknowledgment, false otherwise.\n * @notInstrumented\n * @hook Exposed as a hook so consumers reactively know when recovery codes await acknowledgment, updated when the user changes.\n */\nexport const isPendingRecoveryCodesAcknowledgment = (\n  client = getDefaultClient()\n): boolean => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  return (\n    user.mfaBackupCodeAcknowledgement === MfaBackupCodeAcknowledgement.Pending\n  );\n};\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { isDeviceRegistrationRequired } from '../../deviceRegistration/isDeviceRegistrationRequired';\nimport { isPendingRecoveryCodesAcknowledgment } from '../../mfa/isPendingRecoveryCodesAcknowledgment';\nimport { isUserMissingMfaAuth } from '../../mfa/isUserMissingMfaAuth';\n\n/**\n * Checks if the user has completed all onboarding requirements.\n *\n * This function verifies whether a user has fulfilled all necessary requirements\n * including KYC fields (Know Your Customer information), MFA setup\n * (Multi-Factor Authentication including recovery codes acknowledgment), and\n * device registration.\n *\n * A `false` result means the user still has an outstanding onboarding step, so\n * any feature that requires a fully onboarded (`user:basic`) user should hold\n * off until it returns `true`. Creating or accessing an embedded (WaaS) wallet\n * is one such feature — its backend calls reject a pre-`user:basic` token — but\n * this predicate is general and not specific to embedded wallets.\n *\n * @deprecated Use {@link checkUserScopes} instead. This function conflates\n * Dynamic-controlled requirements (MFA, device registration, required fields)\n * with the concept of \"onboarding complete\", which is app-specific. Replace\n * with `checkUserScopes({ user, scopes: ['user:basic'] })` to check whether\n * Dynamic's requirements are satisfied, and compose your own logic on top for\n * any app-specific onboarding steps.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if onboarding is complete (no pending requirements), false if there are pending requirements.\n * @notInstrumented\n * @hook Exposed as a hook so consumers reactively know when onboarding is complete, updated when the user changes.\n */\nexport const isUserOnboardingComplete = (\n  client = getDefaultClient()\n): boolean => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  const hasMissingKycFields = Boolean(user.missingFields?.length);\n  const hasPendingMfaAuth = isUserMissingMfaAuth(client);\n  const hasPendingRecoveryCodes = isPendingRecoveryCodesAcknowledgment(client);\n  const hasPendingDeviceRegistration = isDeviceRegistrationRequired(user);\n\n  const userOnboardingComplete =\n    !hasMissingKycFields &&\n    !hasPendingMfaAuth &&\n    !hasPendingRecoveryCodes &&\n    !hasPendingDeviceRegistration;\n\n  return userOnboardingComplete;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,IAAa,sBAAb,cAAyCA,+CAAU;CACjD,AAAS;CAET,YAAY,EAAE,SAA2B;AACvC,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;AACF,OAAK,SAAS;;;;;;;;;;;;;;;;;;;ACrClB,IAAa,gCAAb,cAAmDC,+CAAU;CAC3D,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;;;;;;;;;;;ACLN,MAAa,wBAAwB,WAAgC;CACnE,MAAM,OAAOC,6CAAQ,OAAO;AAC5B,KAAI;AACF,MAAI,CAACC,kDAAqB,OAAO,CAAE;AAEnC,uEAA2B;GACzB,UAAWC,qDAAgB,OAAO,GAAG,WAAW;GAChD,aAAa,KAAK,cAAcC,gEAA2B,QACzD,WACA,GACD;GACF,CAAC;UACK,OAAO;AAGd,OAAK,OAAO,KAAK,kCAAkC,MAAM;;;;;;;;;;;;;;;;;ACrB7D,MAAa,gCAAgC,SAC3C,QAAQ,KAAK,OAAO,SAAS,kBAAkB,CAAC;;;;;;;;;;;;;;;ACElD,MAAa,wCACX,SAASC,uDAAkB,KACf;CACZ,MAAM,OAAO,OAAO;AAEpB,oDAAc,MAAM,qBAAqB;AAEzC,QACE,KAAK,iCAAiCC,wDAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACQvE,MAAa,4BACX,SAASC,uDAAkB,KACf;CACZ,MAAM,OAAO,OAAO;AAEpB,oDAAc,MAAM,qBAAqB;CAEzC,MAAM,sBAAsB,QAAQ,KAAK,eAAe,OAAO;CAC/D,MAAM,oBAAoBC,0DAAqB,OAAO;CACtD,MAAM,0BAA0B,qCAAqC,OAAO;CAC5E,MAAM,+BAA+B,6BAA6B,KAAK;AAQvE,QALE,CAAC,uBACD,CAAC,qBACD,CAAC,2BACD,CAAC"}

package/dist/migrateFromFireblocks-B-WUs34v.native.esm.js

@@ -1,65 +0,0 @@
-import { O as NoWalletProviderFoundError, f as DYNAMIC_WAAS_METADATA, l as isWaasWalletProvider, p as getWalletProviders, vt as getDefaultClient, w as getWalletProviderFromWalletAccount, xt as BaseError } from "./updateAuthFromVerifyResponse-CTvWpZLa.native.esm.js";
-import { i as __refreshAuth_wrapped, r as NotWaasWalletAccountError } from "./isDynamicWaasEnabled-DSqgpEcX.native.esm.js";
-
-//#region src/errors/NotWaasWalletProviderError.ts
-var NotWaasWalletProviderError = class extends BaseError {
-	constructor({ walletProviderKey }) {
-		super({
-			cause: null,
-			code: "not_waas_wallet_provider_error",
-			docsUrl: null,
-			name: "NotWaasWalletProviderError",
-			shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`
-		});
-	}
-};
-
-//#endregion
-//#region src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts
-/** @notInstrumented */
-const getWaasWalletProviderFromWalletAccount = ({ walletAccount }, client) => {
-	const walletProvider = getWalletProviderFromWalletAccount({ walletAccount }, client);
-	if (!isWaasWalletProvider(walletProvider)) throw new NotWaasWalletAccountError({ walletAddress: walletAccount.address });
-	return walletProvider;
-};
-
-//#endregion
-//#region src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts
-/**
-* Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.
-*
-* Migration is a single cross-chain operation: one call takes over the Fireblocks
-* key material and provisions Dynamic WaaS wallet accounts for every supported
-* chain. Because it is not per-chain, this resolves a single WaaS wallet provider
-* (any registered chain) and delegates the takeover to it.
-*
-* @param params.deviceId - The Fireblocks NCW device id being migrated.
-* @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.
-* @param params.storage - The serialized Fireblocks NCW device storage.
-* @param params.password - The password that encrypted the legacy device storage.
-* @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.
-* @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.
-* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns A promise resolving to the per-chain migration results.
-* @notInstrumented
-*/
-const migrateFromFireblocks = async ({ coinTypes, deviceId, expectedAddresses, jwt, password, storage }, client = getDefaultClient()) => {
-	const providers = getWalletProviders(client);
-	if (providers.length === 0) throw new NoWalletProviderFoundError({ walletProviderKey: DYNAMIC_WAAS_METADATA.displayName });
-	const waasProvider = providers.find(isWaasWalletProvider);
-	if (!waasProvider) throw new NotWaasWalletProviderError({ walletProviderKey: providers[0].key });
-	const result = await waasProvider.migrateFromFireblocks({
-		coinTypes,
-		deviceId,
-		expectedAddresses,
-		jwt,
-		password,
-		storage
-	});
-	await __refreshAuth_wrapped(client);
-	return result;
-};
-
-//#endregion
-export { getWaasWalletProviderFromWalletAccount as n, NotWaasWalletProviderError as r, migrateFromFireblocks as t };
-//# sourceMappingURL=migrateFromFireblocks-B-WUs34v.native.esm.js.map

package/dist/migrateFromFireblocks-B-WUs34v.native.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrateFromFireblocks-B-WUs34v.native.esm.js","names":["refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgD,UAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAAC,qBAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;ACgCT,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAAS,kBAAkB,KACgB;CAC3C,MAAM,YAAY,mBAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,sBAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAK,qBAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMA,sBAAY,OAAO;AAEzB,QAAO"}