@dynamic-labs-sdk/client 1.33.1 → 1.33.3

package/dist/{getSignedSessionId-Bk-8is5J.native.esm.js → getSignedSessionId-Bt4obN3w.native.esm.js}

@@ -1,5 +1,5 @@
-import { Ct as getCore, Y as getNonce, _t as getElevatedAccessToken, ht as assertDefined } from "./apiClient-BbjPoAwE.native.esm.js";
-import { r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-D7b7mUT9.native.esm.js";
+import { Ct as getCore, Y as getNonce, _t as getElevatedAccessToken, ht as assertDefined } from "./apiClient-CpfEx6Uc.native.esm.js";
+import { r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-CxYft5KR.native.esm.js";
 
 //#region src/modules/mfa/consumeMfaTokenIfRequiredForAction/consumeMfaTokenIfRequiredForAction.ts
 /** @notInstrumented */
@@ -70,4 +70,4 @@ const getSignedSessionId = async (client) => {
 
 //#endregion
 export { getActionAuthorizationTokens as n, consumeMfaTokenIfRequiredForAction as r, getSignedSessionId as t };
-//# sourceMappingURL=getSignedSessionId-Bk-8is5J.native.esm.js.map
+//# sourceMappingURL=getSignedSessionId-Bt4obN3w.native.esm.js.map

package/dist/{getSignedSessionId-Bk-8is5J.native.esm.js.map → getSignedSessionId-Bt4obN3w.native.esm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"getSignedSessionId-Bk-8is5J.native.esm.js","names":["consumeMfaToken"],"sources":["../src/modules/mfa/consumeMfaTokenIfRequiredForAction/consumeMfaTokenIfRequiredForAction.ts","../src/modules/auth/getActionAuthorizationTokens/getActionAuthorizationTokens.ts","../src/modules/sessionKeys/generateNonceSignature/generateNonceSignature.ts","../src/modules/sessionKeys/generateSessionSignature/generateSessionSignature.ts","../src/modules/sessionKeys/getSignedSessionId/getSignedSessionId.ts"],"sourcesContent":["import type { MFAAction } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { consumeMfaToken } from '../consumeMfaToken';\nimport { isMfaRequiredForAction } from '../isMfaRequiredForAction';\n\ntype ConsumeMfaTokenIfRequiredForActionParams = {\n  mfaAction: MFAAction;\n};\n\n/** @notInstrumented */\nexport const consumeMfaTokenIfRequiredForAction = async (\n  { mfaAction }: ConsumeMfaTokenIfRequiredForActionParams,\n  client: DynamicClient\n): Promise<string | undefined> => {\n  const isRequiredForAction = await isMfaRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  if (!isRequiredForAction) {\n    return;\n  }\n\n  return consumeMfaToken(client);\n};\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { TokenScope } from '../consts';\nimport type { MFAAction } from '../../mfa/mfa.consts';\nimport { consumeMfaTokenIfRequiredForAction } from '../../mfa/consumeMfaTokenIfRequiredForAction';\nimport { getElevatedAccessToken } from '../getElevatedAccessToken';\n\ntype GetActionAuthorizationTokensParams = {\n  mfaAction: MFAAction;\n  scope: TokenScope;\n};\n\ntype ActionAuthorizationTokens = {\n  elevatedAccessToken: string | undefined;\n  mfaToken: string | undefined;\n};\n\n/**\n * Resolves the tokens that authorize a verification-gated wallet action.\n *\n * An elevated access token for `scope` is the current proof of verification, so\n * it takes precedence: when one has been banked, the legacy per-action MFA token\n * is left untouched. Demanding both would break every user who has a verified\n * MFA method, because satisfying the challenge with `requestedScopes` mints an\n * elevated access token and no MFA token -- leaving nothing for\n * `consumeMfaTokenIfRequiredForAction` to consume, which then throws.\n *\n * @param params.mfaAction - The action whose legacy MFA requirement to evaluate.\n * @param params.scope - The scope of the elevated access token that authorizes the action.\n * @param client - The Dynamic client instance.\n * @returns The elevated access token, or the legacy MFA token when no elevated token exists.\n * @notInstrumented\n */\nexport const getActionAuthorizationTokens = async (\n  { mfaAction, scope }: GetActionAuthorizationTokensParams,\n  client: DynamicClient\n): Promise<ActionAuthorizationTokens> => {\n  const elevatedAccessToken = getElevatedAccessToken({ scope }, client);\n\n  if (elevatedAccessToken) {\n    return { elevatedAccessToken, mfaToken: undefined };\n  }\n\n  const mfaToken = await consumeMfaTokenIfRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  return { elevatedAccessToken: undefined, mfaToken };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\n\ntype GenerateNonceSignatureParams = {\n  nonce: string;\n};\n\ntype GenerateNonceSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateNonceSignature = async (\n  { nonce }: GenerateNonceSignatureParams,\n  client: DynamicClient\n): Promise<GenerateNonceSignatureResult> => {\n  const core = getCore(client);\n\n  assertDefined(core.keychain, 'Keychain service not available');\n\n  const signature = await core.keychain.sign('session', nonce);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\n\ntype GenerateSessionSignatureParams = {\n  sessionId: string;\n};\n\ntype GenerateSessionSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateSessionSignature = async (\n  { sessionId }: GenerateSessionSignatureParams,\n  client: DynamicClient\n): Promise<GenerateSessionSignatureResult> => {\n  const core = getCore(client);\n\n  const signature = await core.keychain.sign('session', sessionId);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { getNonce } from '../../../utils/getNonce';\nimport { generateNonceSignature } from '../generateNonceSignature';\nimport { generateSessionSignature } from '../generateSessionSignature';\n\ntype GetSignedSessionIdResult = { signature: string };\n\n/** @notInstrumented */\nexport const getSignedSessionId = async (\n  client: DynamicClient\n): Promise<GetSignedSessionIdResult> => {\n  const core = getCore(client);\n\n  const sessionId = core.state.get().user?.sessionId;\n  assertDefined(sessionId, 'Session ID is required');\n\n  const { signature: signedSessionId } = await generateSessionSignature(\n    {\n      sessionId,\n    },\n    client\n  );\n\n  assertDefined(signedSessionId, 'Signed session ID is required');\n\n  const nonce = await getNonce(client);\n\n  const { signature: nonceSignature } = await generateNonceSignature(\n    {\n      nonce,\n    },\n    client\n  );\n\n  assertDefined(nonceSignature, 'Nonce signature is required');\n\n  const signature = `${signedSessionId}/${nonceSignature}/${nonce}`;\n\n  return { signature };\n};\n"],"mappings":";;;;;AAWA,MAAa,qCAAqC,OAChD,EAAE,aACF,WACgC;AAMhC,KAAI,CALwB,MAAM,uBAChC,EAAE,WAAW,EACb,OACD,CAGC;AAGF,QAAOA,0BAAgB,OAAO;;;;;;;;;;;;;;;;;;;;;ACQhC,MAAa,+BAA+B,OAC1C,EAAE,WAAW,SACb,WACuC;CACvC,MAAM,sBAAsB,uBAAuB,EAAE,OAAO,EAAE,OAAO;AAErE,KAAI,oBACF,QAAO;EAAE;EAAqB,UAAU;EAAW;AAQrD,QAAO;EAAE,qBAAqB;EAAW,UALxB,MAAM,mCACrB,EAAE,WAAW,EACb,OACD;EAEkD;;;;;;ACpCrD,MAAa,yBAAyB,OACpC,EAAE,SACF,WAC0C;CAC1C,MAAM,OAAO,QAAQ,OAAO;AAE5B,eAAc,KAAK,UAAU,iCAAiC;AAI9D,QAAO,EAAE,WAFS,MAAM,KAAK,SAAS,KAAK,WAAW,MAAM,EAExC;;;;;;ACXtB,MAAa,2BAA2B,OACtC,EAAE,aACF,WAC4C;AAK5C,QAAO,EAAE,WAFS,MAFL,QAAQ,OAAO,CAEC,SAAS,KAAK,WAAW,UAAU,EAE5C;;;;;;ACRtB,MAAa,qBAAqB,OAChC,WACsC;CAGtC,MAAM,YAFO,QAAQ,OAAO,CAEL,MAAM,KAAK,CAAC,MAAM;AACzC,eAAc,WAAW,yBAAyB;CAElD,MAAM,EAAE,WAAW,oBAAoB,MAAM,yBAC3C,EACE,WACD,EACD,OACD;AAED,eAAc,iBAAiB,gCAAgC;CAE/D,MAAM,QAAQ,MAAM,SAAS,OAAO;CAEpC,MAAM,EAAE,WAAW,mBAAmB,MAAM,uBAC1C,EACE,OACD,EACD,OACD;AAED,eAAc,gBAAgB,8BAA8B;AAI5D,QAAO,EAAE,WAFS,GAAG,gBAAgB,GAAG,eAAe,GAAG,SAEtC"}
+{"version":3,"file":"getSignedSessionId-Bt4obN3w.native.esm.js","names":["consumeMfaToken"],"sources":["../src/modules/mfa/consumeMfaTokenIfRequiredForAction/consumeMfaTokenIfRequiredForAction.ts","../src/modules/auth/getActionAuthorizationTokens/getActionAuthorizationTokens.ts","../src/modules/sessionKeys/generateNonceSignature/generateNonceSignature.ts","../src/modules/sessionKeys/generateSessionSignature/generateSessionSignature.ts","../src/modules/sessionKeys/getSignedSessionId/getSignedSessionId.ts"],"sourcesContent":["import type { MFAAction } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { consumeMfaToken } from '../consumeMfaToken';\nimport { isMfaRequiredForAction } from '../isMfaRequiredForAction';\n\ntype ConsumeMfaTokenIfRequiredForActionParams = {\n  mfaAction: MFAAction;\n};\n\n/** @notInstrumented */\nexport const consumeMfaTokenIfRequiredForAction = async (\n  { mfaAction }: ConsumeMfaTokenIfRequiredForActionParams,\n  client: DynamicClient\n): Promise<string | undefined> => {\n  const isRequiredForAction = await isMfaRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  if (!isRequiredForAction) {\n    return;\n  }\n\n  return consumeMfaToken(client);\n};\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { TokenScope } from '../consts';\nimport type { MFAAction } from '../../mfa/mfa.consts';\nimport { consumeMfaTokenIfRequiredForAction } from '../../mfa/consumeMfaTokenIfRequiredForAction';\nimport { getElevatedAccessToken } from '../getElevatedAccessToken';\n\ntype GetActionAuthorizationTokensParams = {\n  mfaAction: MFAAction;\n  scope: TokenScope;\n};\n\ntype ActionAuthorizationTokens = {\n  elevatedAccessToken: string | undefined;\n  mfaToken: string | undefined;\n};\n\n/**\n * Resolves the tokens that authorize a verification-gated wallet action.\n *\n * An elevated access token for `scope` is the current proof of verification, so\n * it takes precedence: when one has been banked, the legacy per-action MFA token\n * is left untouched. Demanding both would break every user who has a verified\n * MFA method, because satisfying the challenge with `requestedScopes` mints an\n * elevated access token and no MFA token -- leaving nothing for\n * `consumeMfaTokenIfRequiredForAction` to consume, which then throws.\n *\n * @param params.mfaAction - The action whose legacy MFA requirement to evaluate.\n * @param params.scope - The scope of the elevated access token that authorizes the action.\n * @param client - The Dynamic client instance.\n * @returns The elevated access token, or the legacy MFA token when no elevated token exists.\n * @notInstrumented\n */\nexport const getActionAuthorizationTokens = async (\n  { mfaAction, scope }: GetActionAuthorizationTokensParams,\n  client: DynamicClient\n): Promise<ActionAuthorizationTokens> => {\n  const elevatedAccessToken = getElevatedAccessToken({ scope }, client);\n\n  if (elevatedAccessToken) {\n    return { elevatedAccessToken, mfaToken: undefined };\n  }\n\n  const mfaToken = await consumeMfaTokenIfRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  return { elevatedAccessToken: undefined, mfaToken };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\n\ntype GenerateNonceSignatureParams = {\n  nonce: string;\n};\n\ntype GenerateNonceSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateNonceSignature = async (\n  { nonce }: GenerateNonceSignatureParams,\n  client: DynamicClient\n): Promise<GenerateNonceSignatureResult> => {\n  const core = getCore(client);\n\n  assertDefined(core.keychain, 'Keychain service not available');\n\n  const signature = await core.keychain.sign('session', nonce);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\n\ntype GenerateSessionSignatureParams = {\n  sessionId: string;\n};\n\ntype GenerateSessionSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateSessionSignature = async (\n  { sessionId }: GenerateSessionSignatureParams,\n  client: DynamicClient\n): Promise<GenerateSessionSignatureResult> => {\n  const core = getCore(client);\n\n  const signature = await core.keychain.sign('session', sessionId);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { getNonce } from '../../../utils/getNonce';\nimport { generateNonceSignature } from '../generateNonceSignature';\nimport { generateSessionSignature } from '../generateSessionSignature';\n\ntype GetSignedSessionIdResult = { signature: string };\n\n/** @notInstrumented */\nexport const getSignedSessionId = async (\n  client: DynamicClient\n): Promise<GetSignedSessionIdResult> => {\n  const core = getCore(client);\n\n  const sessionId = core.state.get().user?.sessionId;\n  assertDefined(sessionId, 'Session ID is required');\n\n  const { signature: signedSessionId } = await generateSessionSignature(\n    {\n      sessionId,\n    },\n    client\n  );\n\n  assertDefined(signedSessionId, 'Signed session ID is required');\n\n  const nonce = await getNonce(client);\n\n  const { signature: nonceSignature } = await generateNonceSignature(\n    {\n      nonce,\n    },\n    client\n  );\n\n  assertDefined(nonceSignature, 'Nonce signature is required');\n\n  const signature = `${signedSessionId}/${nonceSignature}/${nonce}`;\n\n  return { signature };\n};\n"],"mappings":";;;;;AAWA,MAAa,qCAAqC,OAChD,EAAE,aACF,WACgC;AAMhC,KAAI,CALwB,MAAM,uBAChC,EAAE,WAAW,EACb,OACD,CAGC;AAGF,QAAOA,0BAAgB,OAAO;;;;;;;;;;;;;;;;;;;;;ACQhC,MAAa,+BAA+B,OAC1C,EAAE,WAAW,SACb,WACuC;CACvC,MAAM,sBAAsB,uBAAuB,EAAE,OAAO,EAAE,OAAO;AAErE,KAAI,oBACF,QAAO;EAAE;EAAqB,UAAU;EAAW;AAQrD,QAAO;EAAE,qBAAqB;EAAW,UALxB,MAAM,mCACrB,EAAE,WAAW,EACb,OACD;EAEkD;;;;;;ACpCrD,MAAa,yBAAyB,OACpC,EAAE,SACF,WAC0C;CAC1C,MAAM,OAAO,QAAQ,OAAO;AAE5B,eAAc,KAAK,UAAU,iCAAiC;AAI9D,QAAO,EAAE,WAFS,MAAM,KAAK,SAAS,KAAK,WAAW,MAAM,EAExC;;;;;;ACXtB,MAAa,2BAA2B,OACtC,EAAE,aACF,WAC4C;AAK5C,QAAO,EAAE,WAFS,MAFL,QAAQ,OAAO,CAEC,SAAS,KAAK,WAAW,UAAU,EAE5C;;;;;;ACRtB,MAAa,qBAAqB,OAChC,WACsC;CAGtC,MAAM,YAFO,QAAQ,OAAO,CAEL,MAAM,KAAK,CAAC,MAAM;AACzC,eAAc,WAAW,yBAAyB;CAElD,MAAM,EAAE,WAAW,oBAAoB,MAAM,yBAC3C,EACE,WACD,EACD,OACD;AAED,eAAc,iBAAiB,gCAAgC;CAE/D,MAAM,QAAQ,MAAM,SAAS,OAAO;CAEpC,MAAM,EAAE,WAAW,mBAAmB,MAAM,uBAC1C,EACE,OACD,EACD,OACD;AAED,eAAc,gBAAgB,8BAA8B;AAI5D,QAAO,EAAE,WAFS,GAAG,gBAAgB,GAAG,eAAe,GAAG,SAEtC"}

package/dist/{getSignedSessionId-D_TknHwX.esm.js → getSignedSessionId-Cx7WP4ZJ.esm.js}

@@ -1,5 +1,5 @@
-import { Q as getNonce, gt as assertDefined, vt as getElevatedAccessToken, wt as getCore } from "./logoutWithReason-CX9hGTPw.esm.js";
-import { r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-CHqeZeTS.esm.js";
+import { $ as getNonce, Tt as getCore, _t as assertDefined, yt as getElevatedAccessToken } from "./logoutWithReason-DO0kP7nf.esm.js";
+import { r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-DS8fcwxO.esm.js";
 
 //#region src/modules/mfa/consumeMfaTokenIfRequiredForAction/consumeMfaTokenIfRequiredForAction.ts
 /** @notInstrumented */
@@ -70,4 +70,4 @@ const getSignedSessionId = async (client) => {
 
 //#endregion
 export { getActionAuthorizationTokens as n, consumeMfaTokenIfRequiredForAction as r, getSignedSessionId as t };
-//# sourceMappingURL=getSignedSessionId-D_TknHwX.esm.js.map
+//# sourceMappingURL=getSignedSessionId-Cx7WP4ZJ.esm.js.map

package/dist/{getSignedSessionId-D_TknHwX.esm.js.map → getSignedSessionId-Cx7WP4ZJ.esm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"getSignedSessionId-D_TknHwX.esm.js","names":["consumeMfaToken"],"sources":["../src/modules/mfa/consumeMfaTokenIfRequiredForAction/consumeMfaTokenIfRequiredForAction.ts","../src/modules/auth/getActionAuthorizationTokens/getActionAuthorizationTokens.ts","../src/modules/sessionKeys/generateNonceSignature/generateNonceSignature.ts","../src/modules/sessionKeys/generateSessionSignature/generateSessionSignature.ts","../src/modules/sessionKeys/getSignedSessionId/getSignedSessionId.ts"],"sourcesContent":["import type { MFAAction } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { consumeMfaToken } from '../consumeMfaToken';\nimport { isMfaRequiredForAction } from '../isMfaRequiredForAction';\n\ntype ConsumeMfaTokenIfRequiredForActionParams = {\n  mfaAction: MFAAction;\n};\n\n/** @notInstrumented */\nexport const consumeMfaTokenIfRequiredForAction = async (\n  { mfaAction }: ConsumeMfaTokenIfRequiredForActionParams,\n  client: DynamicClient\n): Promise<string | undefined> => {\n  const isRequiredForAction = await isMfaRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  if (!isRequiredForAction) {\n    return;\n  }\n\n  return consumeMfaToken(client);\n};\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { TokenScope } from '../consts';\nimport type { MFAAction } from '../../mfa/mfa.consts';\nimport { consumeMfaTokenIfRequiredForAction } from '../../mfa/consumeMfaTokenIfRequiredForAction';\nimport { getElevatedAccessToken } from '../getElevatedAccessToken';\n\ntype GetActionAuthorizationTokensParams = {\n  mfaAction: MFAAction;\n  scope: TokenScope;\n};\n\ntype ActionAuthorizationTokens = {\n  elevatedAccessToken: string | undefined;\n  mfaToken: string | undefined;\n};\n\n/**\n * Resolves the tokens that authorize a verification-gated wallet action.\n *\n * An elevated access token for `scope` is the current proof of verification, so\n * it takes precedence: when one has been banked, the legacy per-action MFA token\n * is left untouched. Demanding both would break every user who has a verified\n * MFA method, because satisfying the challenge with `requestedScopes` mints an\n * elevated access token and no MFA token -- leaving nothing for\n * `consumeMfaTokenIfRequiredForAction` to consume, which then throws.\n *\n * @param params.mfaAction - The action whose legacy MFA requirement to evaluate.\n * @param params.scope - The scope of the elevated access token that authorizes the action.\n * @param client - The Dynamic client instance.\n * @returns The elevated access token, or the legacy MFA token when no elevated token exists.\n * @notInstrumented\n */\nexport const getActionAuthorizationTokens = async (\n  { mfaAction, scope }: GetActionAuthorizationTokensParams,\n  client: DynamicClient\n): Promise<ActionAuthorizationTokens> => {\n  const elevatedAccessToken = getElevatedAccessToken({ scope }, client);\n\n  if (elevatedAccessToken) {\n    return { elevatedAccessToken, mfaToken: undefined };\n  }\n\n  const mfaToken = await consumeMfaTokenIfRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  return { elevatedAccessToken: undefined, mfaToken };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\n\ntype GenerateNonceSignatureParams = {\n  nonce: string;\n};\n\ntype GenerateNonceSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateNonceSignature = async (\n  { nonce }: GenerateNonceSignatureParams,\n  client: DynamicClient\n): Promise<GenerateNonceSignatureResult> => {\n  const core = getCore(client);\n\n  assertDefined(core.keychain, 'Keychain service not available');\n\n  const signature = await core.keychain.sign('session', nonce);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\n\ntype GenerateSessionSignatureParams = {\n  sessionId: string;\n};\n\ntype GenerateSessionSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateSessionSignature = async (\n  { sessionId }: GenerateSessionSignatureParams,\n  client: DynamicClient\n): Promise<GenerateSessionSignatureResult> => {\n  const core = getCore(client);\n\n  const signature = await core.keychain.sign('session', sessionId);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { getNonce } from '../../../utils/getNonce';\nimport { generateNonceSignature } from '../generateNonceSignature';\nimport { generateSessionSignature } from '../generateSessionSignature';\n\ntype GetSignedSessionIdResult = { signature: string };\n\n/** @notInstrumented */\nexport const getSignedSessionId = async (\n  client: DynamicClient\n): Promise<GetSignedSessionIdResult> => {\n  const core = getCore(client);\n\n  const sessionId = core.state.get().user?.sessionId;\n  assertDefined(sessionId, 'Session ID is required');\n\n  const { signature: signedSessionId } = await generateSessionSignature(\n    {\n      sessionId,\n    },\n    client\n  );\n\n  assertDefined(signedSessionId, 'Signed session ID is required');\n\n  const nonce = await getNonce(client);\n\n  const { signature: nonceSignature } = await generateNonceSignature(\n    {\n      nonce,\n    },\n    client\n  );\n\n  assertDefined(nonceSignature, 'Nonce signature is required');\n\n  const signature = `${signedSessionId}/${nonceSignature}/${nonce}`;\n\n  return { signature };\n};\n"],"mappings":";;;;;AAWA,MAAa,qCAAqC,OAChD,EAAE,aACF,WACgC;AAMhC,KAAI,CALwB,MAAM,uBAChC,EAAE,WAAW,EACb,OACD,CAGC;AAGF,QAAOA,0BAAgB,OAAO;;;;;;;;;;;;;;;;;;;;;ACQhC,MAAa,+BAA+B,OAC1C,EAAE,WAAW,SACb,WACuC;CACvC,MAAM,sBAAsB,uBAAuB,EAAE,OAAO,EAAE,OAAO;AAErE,KAAI,oBACF,QAAO;EAAE;EAAqB,UAAU;EAAW;AAQrD,QAAO;EAAE,qBAAqB;EAAW,UALxB,MAAM,mCACrB,EAAE,WAAW,EACb,OACD;EAEkD;;;;;;ACpCrD,MAAa,yBAAyB,OACpC,EAAE,SACF,WAC0C;CAC1C,MAAM,OAAO,QAAQ,OAAO;AAE5B,eAAc,KAAK,UAAU,iCAAiC;AAI9D,QAAO,EAAE,WAFS,MAAM,KAAK,SAAS,KAAK,WAAW,MAAM,EAExC;;;;;;ACXtB,MAAa,2BAA2B,OACtC,EAAE,aACF,WAC4C;AAK5C,QAAO,EAAE,WAFS,MAFL,QAAQ,OAAO,CAEC,SAAS,KAAK,WAAW,UAAU,EAE5C;;;;;;ACRtB,MAAa,qBAAqB,OAChC,WACsC;CAGtC,MAAM,YAFO,QAAQ,OAAO,CAEL,MAAM,KAAK,CAAC,MAAM;AACzC,eAAc,WAAW,yBAAyB;CAElD,MAAM,EAAE,WAAW,oBAAoB,MAAM,yBAC3C,EACE,WACD,EACD,OACD;AAED,eAAc,iBAAiB,gCAAgC;CAE/D,MAAM,QAAQ,MAAM,SAAS,OAAO;CAEpC,MAAM,EAAE,WAAW,mBAAmB,MAAM,uBAC1C,EACE,OACD,EACD,OACD;AAED,eAAc,gBAAgB,8BAA8B;AAI5D,QAAO,EAAE,WAFS,GAAG,gBAAgB,GAAG,eAAe,GAAG,SAEtC"}
+{"version":3,"file":"getSignedSessionId-Cx7WP4ZJ.esm.js","names":["consumeMfaToken"],"sources":["../src/modules/mfa/consumeMfaTokenIfRequiredForAction/consumeMfaTokenIfRequiredForAction.ts","../src/modules/auth/getActionAuthorizationTokens/getActionAuthorizationTokens.ts","../src/modules/sessionKeys/generateNonceSignature/generateNonceSignature.ts","../src/modules/sessionKeys/generateSessionSignature/generateSessionSignature.ts","../src/modules/sessionKeys/getSignedSessionId/getSignedSessionId.ts"],"sourcesContent":["import type { MFAAction } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { consumeMfaToken } from '../consumeMfaToken';\nimport { isMfaRequiredForAction } from '../isMfaRequiredForAction';\n\ntype ConsumeMfaTokenIfRequiredForActionParams = {\n  mfaAction: MFAAction;\n};\n\n/** @notInstrumented */\nexport const consumeMfaTokenIfRequiredForAction = async (\n  { mfaAction }: ConsumeMfaTokenIfRequiredForActionParams,\n  client: DynamicClient\n): Promise<string | undefined> => {\n  const isRequiredForAction = await isMfaRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  if (!isRequiredForAction) {\n    return;\n  }\n\n  return consumeMfaToken(client);\n};\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { TokenScope } from '../consts';\nimport type { MFAAction } from '../../mfa/mfa.consts';\nimport { consumeMfaTokenIfRequiredForAction } from '../../mfa/consumeMfaTokenIfRequiredForAction';\nimport { getElevatedAccessToken } from '../getElevatedAccessToken';\n\ntype GetActionAuthorizationTokensParams = {\n  mfaAction: MFAAction;\n  scope: TokenScope;\n};\n\ntype ActionAuthorizationTokens = {\n  elevatedAccessToken: string | undefined;\n  mfaToken: string | undefined;\n};\n\n/**\n * Resolves the tokens that authorize a verification-gated wallet action.\n *\n * An elevated access token for `scope` is the current proof of verification, so\n * it takes precedence: when one has been banked, the legacy per-action MFA token\n * is left untouched. Demanding both would break every user who has a verified\n * MFA method, because satisfying the challenge with `requestedScopes` mints an\n * elevated access token and no MFA token -- leaving nothing for\n * `consumeMfaTokenIfRequiredForAction` to consume, which then throws.\n *\n * @param params.mfaAction - The action whose legacy MFA requirement to evaluate.\n * @param params.scope - The scope of the elevated access token that authorizes the action.\n * @param client - The Dynamic client instance.\n * @returns The elevated access token, or the legacy MFA token when no elevated token exists.\n * @notInstrumented\n */\nexport const getActionAuthorizationTokens = async (\n  { mfaAction, scope }: GetActionAuthorizationTokensParams,\n  client: DynamicClient\n): Promise<ActionAuthorizationTokens> => {\n  const elevatedAccessToken = getElevatedAccessToken({ scope }, client);\n\n  if (elevatedAccessToken) {\n    return { elevatedAccessToken, mfaToken: undefined };\n  }\n\n  const mfaToken = await consumeMfaTokenIfRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  return { elevatedAccessToken: undefined, mfaToken };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\n\ntype GenerateNonceSignatureParams = {\n  nonce: string;\n};\n\ntype GenerateNonceSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateNonceSignature = async (\n  { nonce }: GenerateNonceSignatureParams,\n  client: DynamicClient\n): Promise<GenerateNonceSignatureResult> => {\n  const core = getCore(client);\n\n  assertDefined(core.keychain, 'Keychain service not available');\n\n  const signature = await core.keychain.sign('session', nonce);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\n\ntype GenerateSessionSignatureParams = {\n  sessionId: string;\n};\n\ntype GenerateSessionSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateSessionSignature = async (\n  { sessionId }: GenerateSessionSignatureParams,\n  client: DynamicClient\n): Promise<GenerateSessionSignatureResult> => {\n  const core = getCore(client);\n\n  const signature = await core.keychain.sign('session', sessionId);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { getNonce } from '../../../utils/getNonce';\nimport { generateNonceSignature } from '../generateNonceSignature';\nimport { generateSessionSignature } from '../generateSessionSignature';\n\ntype GetSignedSessionIdResult = { signature: string };\n\n/** @notInstrumented */\nexport const getSignedSessionId = async (\n  client: DynamicClient\n): Promise<GetSignedSessionIdResult> => {\n  const core = getCore(client);\n\n  const sessionId = core.state.get().user?.sessionId;\n  assertDefined(sessionId, 'Session ID is required');\n\n  const { signature: signedSessionId } = await generateSessionSignature(\n    {\n      sessionId,\n    },\n    client\n  );\n\n  assertDefined(signedSessionId, 'Signed session ID is required');\n\n  const nonce = await getNonce(client);\n\n  const { signature: nonceSignature } = await generateNonceSignature(\n    {\n      nonce,\n    },\n    client\n  );\n\n  assertDefined(nonceSignature, 'Nonce signature is required');\n\n  const signature = `${signedSessionId}/${nonceSignature}/${nonce}`;\n\n  return { signature };\n};\n"],"mappings":";;;;;AAWA,MAAa,qCAAqC,OAChD,EAAE,aACF,WACgC;AAMhC,KAAI,CALwB,MAAM,uBAChC,EAAE,WAAW,EACb,OACD,CAGC;AAGF,QAAOA,0BAAgB,OAAO;;;;;;;;;;;;;;;;;;;;;ACQhC,MAAa,+BAA+B,OAC1C,EAAE,WAAW,SACb,WACuC;CACvC,MAAM,sBAAsB,uBAAuB,EAAE,OAAO,EAAE,OAAO;AAErE,KAAI,oBACF,QAAO;EAAE;EAAqB,UAAU;EAAW;AAQrD,QAAO;EAAE,qBAAqB;EAAW,UALxB,MAAM,mCACrB,EAAE,WAAW,EACb,OACD;EAEkD;;;;;;ACpCrD,MAAa,yBAAyB,OACpC,EAAE,SACF,WAC0C;CAC1C,MAAM,OAAO,QAAQ,OAAO;AAE5B,eAAc,KAAK,UAAU,iCAAiC;AAI9D,QAAO,EAAE,WAFS,MAAM,KAAK,SAAS,KAAK,WAAW,MAAM,EAExC;;;;;;ACXtB,MAAa,2BAA2B,OACtC,EAAE,aACF,WAC4C;AAK5C,QAAO,EAAE,WAFS,MAFL,QAAQ,OAAO,CAEC,SAAS,KAAK,WAAW,UAAU,EAE5C;;;;;;ACRtB,MAAa,qBAAqB,OAChC,WACsC;CAGtC,MAAM,YAFO,QAAQ,OAAO,CAEL,MAAM,KAAK,CAAC,MAAM;AACzC,eAAc,WAAW,yBAAyB;CAElD,MAAM,EAAE,WAAW,oBAAoB,MAAM,yBAC3C,EACE,WACD,EACD,OACD;AAED,eAAc,iBAAiB,gCAAgC;CAE/D,MAAM,QAAQ,MAAM,SAAS,OAAO;CAEpC,MAAM,EAAE,WAAW,mBAAmB,MAAM,uBAC1C,EACE,OACD,EACD,OACD;AAED,eAAc,gBAAgB,8BAA8B;AAI5D,QAAO,EAAE,WAFS,GAAG,gBAAgB,GAAG,eAAe,GAAG,SAEtC"}

package/dist/{getSignedSessionId-2O_cJtIV.cjs → getSignedSessionId-DiVxv0qz.cjs}

@@ -1,5 +1,5 @@
-const require_logoutWithReason = require('./logoutWithReason-CFjm8dbR.cjs');
-const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-DF65MJNN.cjs');
+const require_logoutWithReason = require('./logoutWithReason-BKwWBsCT.cjs');
+const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-Czx-uPFY.cjs');
 
 //#region src/modules/mfa/consumeMfaTokenIfRequiredForAction/consumeMfaTokenIfRequiredForAction.ts
 /** @notInstrumented */
@@ -87,4 +87,4 @@ Object.defineProperty(exports, 'getSignedSessionId', {
     return getSignedSessionId;
   }
 });
-//# sourceMappingURL=getSignedSessionId-2O_cJtIV.cjs.map
+//# sourceMappingURL=getSignedSessionId-DiVxv0qz.cjs.map

package/dist/{getSignedSessionId-2O_cJtIV.cjs.map → getSignedSessionId-DiVxv0qz.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"getSignedSessionId-2O_cJtIV.cjs","names":["isMfaRequiredForAction","consumeMfaToken","getElevatedAccessToken","getCore","getCore","getCore","getNonce"],"sources":["../src/modules/mfa/consumeMfaTokenIfRequiredForAction/consumeMfaTokenIfRequiredForAction.ts","../src/modules/auth/getActionAuthorizationTokens/getActionAuthorizationTokens.ts","../src/modules/sessionKeys/generateNonceSignature/generateNonceSignature.ts","../src/modules/sessionKeys/generateSessionSignature/generateSessionSignature.ts","../src/modules/sessionKeys/getSignedSessionId/getSignedSessionId.ts"],"sourcesContent":["import type { MFAAction } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { consumeMfaToken } from '../consumeMfaToken';\nimport { isMfaRequiredForAction } from '../isMfaRequiredForAction';\n\ntype ConsumeMfaTokenIfRequiredForActionParams = {\n  mfaAction: MFAAction;\n};\n\n/** @notInstrumented */\nexport const consumeMfaTokenIfRequiredForAction = async (\n  { mfaAction }: ConsumeMfaTokenIfRequiredForActionParams,\n  client: DynamicClient\n): Promise<string | undefined> => {\n  const isRequiredForAction = await isMfaRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  if (!isRequiredForAction) {\n    return;\n  }\n\n  return consumeMfaToken(client);\n};\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { TokenScope } from '../consts';\nimport type { MFAAction } from '../../mfa/mfa.consts';\nimport { consumeMfaTokenIfRequiredForAction } from '../../mfa/consumeMfaTokenIfRequiredForAction';\nimport { getElevatedAccessToken } from '../getElevatedAccessToken';\n\ntype GetActionAuthorizationTokensParams = {\n  mfaAction: MFAAction;\n  scope: TokenScope;\n};\n\ntype ActionAuthorizationTokens = {\n  elevatedAccessToken: string | undefined;\n  mfaToken: string | undefined;\n};\n\n/**\n * Resolves the tokens that authorize a verification-gated wallet action.\n *\n * An elevated access token for `scope` is the current proof of verification, so\n * it takes precedence: when one has been banked, the legacy per-action MFA token\n * is left untouched. Demanding both would break every user who has a verified\n * MFA method, because satisfying the challenge with `requestedScopes` mints an\n * elevated access token and no MFA token -- leaving nothing for\n * `consumeMfaTokenIfRequiredForAction` to consume, which then throws.\n *\n * @param params.mfaAction - The action whose legacy MFA requirement to evaluate.\n * @param params.scope - The scope of the elevated access token that authorizes the action.\n * @param client - The Dynamic client instance.\n * @returns The elevated access token, or the legacy MFA token when no elevated token exists.\n * @notInstrumented\n */\nexport const getActionAuthorizationTokens = async (\n  { mfaAction, scope }: GetActionAuthorizationTokensParams,\n  client: DynamicClient\n): Promise<ActionAuthorizationTokens> => {\n  const elevatedAccessToken = getElevatedAccessToken({ scope }, client);\n\n  if (elevatedAccessToken) {\n    return { elevatedAccessToken, mfaToken: undefined };\n  }\n\n  const mfaToken = await consumeMfaTokenIfRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  return { elevatedAccessToken: undefined, mfaToken };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\n\ntype GenerateNonceSignatureParams = {\n  nonce: string;\n};\n\ntype GenerateNonceSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateNonceSignature = async (\n  { nonce }: GenerateNonceSignatureParams,\n  client: DynamicClient\n): Promise<GenerateNonceSignatureResult> => {\n  const core = getCore(client);\n\n  assertDefined(core.keychain, 'Keychain service not available');\n\n  const signature = await core.keychain.sign('session', nonce);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\n\ntype GenerateSessionSignatureParams = {\n  sessionId: string;\n};\n\ntype GenerateSessionSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateSessionSignature = async (\n  { sessionId }: GenerateSessionSignatureParams,\n  client: DynamicClient\n): Promise<GenerateSessionSignatureResult> => {\n  const core = getCore(client);\n\n  const signature = await core.keychain.sign('session', sessionId);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { getNonce } from '../../../utils/getNonce';\nimport { generateNonceSignature } from '../generateNonceSignature';\nimport { generateSessionSignature } from '../generateSessionSignature';\n\ntype GetSignedSessionIdResult = { signature: string };\n\n/** @notInstrumented */\nexport const getSignedSessionId = async (\n  client: DynamicClient\n): Promise<GetSignedSessionIdResult> => {\n  const core = getCore(client);\n\n  const sessionId = core.state.get().user?.sessionId;\n  assertDefined(sessionId, 'Session ID is required');\n\n  const { signature: signedSessionId } = await generateSessionSignature(\n    {\n      sessionId,\n    },\n    client\n  );\n\n  assertDefined(signedSessionId, 'Signed session ID is required');\n\n  const nonce = await getNonce(client);\n\n  const { signature: nonceSignature } = await generateNonceSignature(\n    {\n      nonce,\n    },\n    client\n  );\n\n  assertDefined(nonceSignature, 'Nonce signature is required');\n\n  const signature = `${signedSessionId}/${nonceSignature}/${nonce}`;\n\n  return { signature };\n};\n"],"mappings":";;;;;AAWA,MAAa,qCAAqC,OAChD,EAAE,aACF,WACgC;AAMhC,KAAI,CALwB,MAAMA,sDAChC,EAAE,WAAW,EACb,OACD,CAGC;AAGF,QAAOC,yDAAgB,OAAO;;;;;;;;;;;;;;;;;;;;;ACQhC,MAAa,+BAA+B,OAC1C,EAAE,WAAW,SACb,WACuC;CACvC,MAAM,sBAAsBC,gDAAuB,EAAE,OAAO,EAAE,OAAO;AAErE,KAAI,oBACF,QAAO;EAAE;EAAqB,UAAU;EAAW;AAQrD,QAAO;EAAE,qBAAqB;EAAW,UALxB,MAAM,mCACrB,EAAE,WAAW,EACb,OACD;EAEkD;;;;;;ACpCrD,MAAa,yBAAyB,OACpC,EAAE,SACF,WAC0C;CAC1C,MAAM,OAAOC,iCAAQ,OAAO;AAE5B,wCAAc,KAAK,UAAU,iCAAiC;AAI9D,QAAO,EAAE,WAFS,MAAM,KAAK,SAAS,KAAK,WAAW,MAAM,EAExC;;;;;;ACXtB,MAAa,2BAA2B,OACtC,EAAE,aACF,WAC4C;AAK5C,QAAO,EAAE,WAFS,MAFLC,iCAAQ,OAAO,CAEC,SAAS,KAAK,WAAW,UAAU,EAE5C;;;;;;ACRtB,MAAa,qBAAqB,OAChC,WACsC;CAGtC,MAAM,YAFOC,iCAAQ,OAAO,CAEL,MAAM,KAAK,CAAC,MAAM;AACzC,wCAAc,WAAW,yBAAyB;CAElD,MAAM,EAAE,WAAW,oBAAoB,MAAM,yBAC3C,EACE,WACD,EACD,OACD;AAED,wCAAc,iBAAiB,gCAAgC;CAE/D,MAAM,QAAQ,MAAMC,kCAAS,OAAO;CAEpC,MAAM,EAAE,WAAW,mBAAmB,MAAM,uBAC1C,EACE,OACD,EACD,OACD;AAED,wCAAc,gBAAgB,8BAA8B;AAI5D,QAAO,EAAE,WAFS,GAAG,gBAAgB,GAAG,eAAe,GAAG,SAEtC"}
+{"version":3,"file":"getSignedSessionId-DiVxv0qz.cjs","names":["isMfaRequiredForAction","consumeMfaToken","getElevatedAccessToken","getCore","getCore","getCore","getNonce"],"sources":["../src/modules/mfa/consumeMfaTokenIfRequiredForAction/consumeMfaTokenIfRequiredForAction.ts","../src/modules/auth/getActionAuthorizationTokens/getActionAuthorizationTokens.ts","../src/modules/sessionKeys/generateNonceSignature/generateNonceSignature.ts","../src/modules/sessionKeys/generateSessionSignature/generateSessionSignature.ts","../src/modules/sessionKeys/getSignedSessionId/getSignedSessionId.ts"],"sourcesContent":["import type { MFAAction } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { consumeMfaToken } from '../consumeMfaToken';\nimport { isMfaRequiredForAction } from '../isMfaRequiredForAction';\n\ntype ConsumeMfaTokenIfRequiredForActionParams = {\n  mfaAction: MFAAction;\n};\n\n/** @notInstrumented */\nexport const consumeMfaTokenIfRequiredForAction = async (\n  { mfaAction }: ConsumeMfaTokenIfRequiredForActionParams,\n  client: DynamicClient\n): Promise<string | undefined> => {\n  const isRequiredForAction = await isMfaRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  if (!isRequiredForAction) {\n    return;\n  }\n\n  return consumeMfaToken(client);\n};\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { TokenScope } from '../consts';\nimport type { MFAAction } from '../../mfa/mfa.consts';\nimport { consumeMfaTokenIfRequiredForAction } from '../../mfa/consumeMfaTokenIfRequiredForAction';\nimport { getElevatedAccessToken } from '../getElevatedAccessToken';\n\ntype GetActionAuthorizationTokensParams = {\n  mfaAction: MFAAction;\n  scope: TokenScope;\n};\n\ntype ActionAuthorizationTokens = {\n  elevatedAccessToken: string | undefined;\n  mfaToken: string | undefined;\n};\n\n/**\n * Resolves the tokens that authorize a verification-gated wallet action.\n *\n * An elevated access token for `scope` is the current proof of verification, so\n * it takes precedence: when one has been banked, the legacy per-action MFA token\n * is left untouched. Demanding both would break every user who has a verified\n * MFA method, because satisfying the challenge with `requestedScopes` mints an\n * elevated access token and no MFA token -- leaving nothing for\n * `consumeMfaTokenIfRequiredForAction` to consume, which then throws.\n *\n * @param params.mfaAction - The action whose legacy MFA requirement to evaluate.\n * @param params.scope - The scope of the elevated access token that authorizes the action.\n * @param client - The Dynamic client instance.\n * @returns The elevated access token, or the legacy MFA token when no elevated token exists.\n * @notInstrumented\n */\nexport const getActionAuthorizationTokens = async (\n  { mfaAction, scope }: GetActionAuthorizationTokensParams,\n  client: DynamicClient\n): Promise<ActionAuthorizationTokens> => {\n  const elevatedAccessToken = getElevatedAccessToken({ scope }, client);\n\n  if (elevatedAccessToken) {\n    return { elevatedAccessToken, mfaToken: undefined };\n  }\n\n  const mfaToken = await consumeMfaTokenIfRequiredForAction(\n    { mfaAction },\n    client\n  );\n\n  return { elevatedAccessToken: undefined, mfaToken };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\n\ntype GenerateNonceSignatureParams = {\n  nonce: string;\n};\n\ntype GenerateNonceSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateNonceSignature = async (\n  { nonce }: GenerateNonceSignatureParams,\n  client: DynamicClient\n): Promise<GenerateNonceSignatureResult> => {\n  const core = getCore(client);\n\n  assertDefined(core.keychain, 'Keychain service not available');\n\n  const signature = await core.keychain.sign('session', nonce);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\n\ntype GenerateSessionSignatureParams = {\n  sessionId: string;\n};\n\ntype GenerateSessionSignatureResult = { signature: string };\n\n/** @notInstrumented */\nexport const generateSessionSignature = async (\n  { sessionId }: GenerateSessionSignatureParams,\n  client: DynamicClient\n): Promise<GenerateSessionSignatureResult> => {\n  const core = getCore(client);\n\n  const signature = await core.keychain.sign('session', sessionId);\n\n  return { signature };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { getNonce } from '../../../utils/getNonce';\nimport { generateNonceSignature } from '../generateNonceSignature';\nimport { generateSessionSignature } from '../generateSessionSignature';\n\ntype GetSignedSessionIdResult = { signature: string };\n\n/** @notInstrumented */\nexport const getSignedSessionId = async (\n  client: DynamicClient\n): Promise<GetSignedSessionIdResult> => {\n  const core = getCore(client);\n\n  const sessionId = core.state.get().user?.sessionId;\n  assertDefined(sessionId, 'Session ID is required');\n\n  const { signature: signedSessionId } = await generateSessionSignature(\n    {\n      sessionId,\n    },\n    client\n  );\n\n  assertDefined(signedSessionId, 'Signed session ID is required');\n\n  const nonce = await getNonce(client);\n\n  const { signature: nonceSignature } = await generateNonceSignature(\n    {\n      nonce,\n    },\n    client\n  );\n\n  assertDefined(nonceSignature, 'Nonce signature is required');\n\n  const signature = `${signedSessionId}/${nonceSignature}/${nonce}`;\n\n  return { signature };\n};\n"],"mappings":";;;;;AAWA,MAAa,qCAAqC,OAChD,EAAE,aACF,WACgC;AAMhC,KAAI,CALwB,MAAMA,sDAChC,EAAE,WAAW,EACb,OACD,CAGC;AAGF,QAAOC,yDAAgB,OAAO;;;;;;;;;;;;;;;;;;;;;ACQhC,MAAa,+BAA+B,OAC1C,EAAE,WAAW,SACb,WACuC;CACvC,MAAM,sBAAsBC,gDAAuB,EAAE,OAAO,EAAE,OAAO;AAErE,KAAI,oBACF,QAAO;EAAE;EAAqB,UAAU;EAAW;AAQrD,QAAO;EAAE,qBAAqB;EAAW,UALxB,MAAM,mCACrB,EAAE,WAAW,EACb,OACD;EAEkD;;;;;;ACpCrD,MAAa,yBAAyB,OACpC,EAAE,SACF,WAC0C;CAC1C,MAAM,OAAOC,iCAAQ,OAAO;AAE5B,wCAAc,KAAK,UAAU,iCAAiC;AAI9D,QAAO,EAAE,WAFS,MAAM,KAAK,SAAS,KAAK,WAAW,MAAM,EAExC;;;;;;ACXtB,MAAa,2BAA2B,OACtC,EAAE,aACF,WAC4C;AAK5C,QAAO,EAAE,WAFS,MAFLC,iCAAQ,OAAO,CAEC,SAAS,KAAK,WAAW,UAAU,EAE5C;;;;;;ACRtB,MAAa,qBAAqB,OAChC,WACsC;CAGtC,MAAM,YAFOC,iCAAQ,OAAO,CAEL,MAAM,KAAK,CAAC,MAAM;AACzC,wCAAc,WAAW,yBAAyB;CAElD,MAAM,EAAE,WAAW,oBAAoB,MAAM,yBAC3C,EACE,WACD,EACD,OACD;AAED,wCAAc,iBAAiB,gCAAgC;CAE/D,MAAM,QAAQ,MAAMC,kCAAS,OAAO;CAEpC,MAAM,EAAE,WAAW,mBAAmB,MAAM,uBAC1C,EACE,OACD,EACD,OACD;AAED,wCAAc,gBAAgB,8BAA8B;AAI5D,QAAO,EAAE,WAFS,GAAG,gBAAgB,GAAG,eAAe,GAAG,SAEtC"}

package/dist/{getVerifiedCredentialForWalletAccount-BmsHgXbj.esm.js → getVerifiedCredentialForWalletAccount-DfKRbqco.esm.js}

@@ -1,4 +1,4 @@
-import { j as getWalletProviders, s as NoWalletProviderFoundError } from "./logoutWithReason-CX9hGTPw.esm.js";
+import { M as getWalletProviders, c as NoWalletProviderFoundError } from "./logoutWithReason-DO0kP7nf.esm.js";
 
 //#region src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts
 /** @notInstrumented */
@@ -17,4 +17,4 @@ const getVerifiedCredentialForWalletAccount = ({ walletAccount }, client) => {
 
 //#endregion
 export { getWalletProviderByKey as n, getVerifiedCredentialForWalletAccount as t };
-//# sourceMappingURL=getVerifiedCredentialForWalletAccount-BmsHgXbj.esm.js.map
+//# sourceMappingURL=getVerifiedCredentialForWalletAccount-DfKRbqco.esm.js.map

package/dist/{getVerifiedCredentialForWalletAccount-BmsHgXbj.esm.js.map → getVerifiedCredentialForWalletAccount-DfKRbqco.esm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"getVerifiedCredentialForWalletAccount-BmsHgXbj.esm.js","names":["walletProvider"],"sources":["../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts"],"sourcesContent":["import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\nimport type { WalletProvider } from '../walletProvider';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @notInstrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n): WalletProvider => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n","import type { JwtVerifiedCredential } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n): JwtVerifiedCredential | undefined => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n"],"mappings":";;;;AAUA,MAAa,0BACX,EAAE,qBACF,WACmB;CAGnB,MAAM,iBAFkB,mBAAmB,OAAO,CAEX,MACpC,qBAAmBA,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAI,2BAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO;;;;;;ACdT,MAAa,yCACX,EAAE,iBACF,WACsC;AACtC,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC"}
+{"version":3,"file":"getVerifiedCredentialForWalletAccount-DfKRbqco.esm.js","names":["walletProvider"],"sources":["../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts"],"sourcesContent":["import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\nimport type { WalletProvider } from '../walletProvider';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @notInstrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n): WalletProvider => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n","import type { JwtVerifiedCredential } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n): JwtVerifiedCredential | undefined => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n"],"mappings":";;;;AAUA,MAAa,0BACX,EAAE,qBACF,WACmB;CAGnB,MAAM,iBAFkB,mBAAmB,OAAO,CAEX,MACpC,qBAAmBA,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAI,2BAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO;;;;;;ACdT,MAAa,yCACX,EAAE,iBACF,WACsC;AACtC,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC"}

package/dist/{getVerifiedCredentialForWalletAccount-upiwolAi.cjs → getVerifiedCredentialForWalletAccount-UIcOv7IN.cjs}

@@ -1,4 +1,4 @@
-const require_logoutWithReason = require('./logoutWithReason-CFjm8dbR.cjs');
+const require_logoutWithReason = require('./logoutWithReason-BKwWBsCT.cjs');
 
 //#region src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts
 /** @notInstrumented */
@@ -28,4 +28,4 @@ Object.defineProperty(exports, 'getWalletProviderByKey', {
     return getWalletProviderByKey;
   }
 });
-//# sourceMappingURL=getVerifiedCredentialForWalletAccount-upiwolAi.cjs.map
+//# sourceMappingURL=getVerifiedCredentialForWalletAccount-UIcOv7IN.cjs.map

package/dist/{getVerifiedCredentialForWalletAccount-upiwolAi.cjs.map → getVerifiedCredentialForWalletAccount-UIcOv7IN.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"getVerifiedCredentialForWalletAccount-upiwolAi.cjs","names":["getWalletProviders","walletProvider","NoWalletProviderFoundError"],"sources":["../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts"],"sourcesContent":["import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\nimport type { WalletProvider } from '../walletProvider';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @notInstrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n): WalletProvider => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n","import type { JwtVerifiedCredential } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n): JwtVerifiedCredential | undefined => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n"],"mappings":";;;;AAUA,MAAa,0BACX,EAAE,qBACF,WACmB;CAGnB,MAAM,iBAFkBA,4CAAmB,OAAO,CAEX,MACpC,qBAAmBC,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAIC,oDAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO;;;;;;ACdT,MAAa,yCACX,EAAE,iBACF,WACsC;AACtC,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC"}
+{"version":3,"file":"getVerifiedCredentialForWalletAccount-UIcOv7IN.cjs","names":["getWalletProviders","walletProvider","NoWalletProviderFoundError"],"sources":["../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts"],"sourcesContent":["import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\nimport type { WalletProvider } from '../walletProvider';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @notInstrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n): WalletProvider => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n","import type { JwtVerifiedCredential } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n): JwtVerifiedCredential | undefined => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n"],"mappings":";;;;AAUA,MAAa,0BACX,EAAE,qBACF,WACmB;CAGnB,MAAM,iBAFkBA,4CAAmB,OAAO,CAEX,MACpC,qBAAmBC,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAIC,oDAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO;;;;;;ACdT,MAAa,yCACX,EAAE,iBACF,WACsC;AACtC,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC"}

package/dist/index.cjs

@@ -1,10 +1,10 @@
-const require_logoutWithReason = require('./logoutWithReason-CFjm8dbR.cjs');
-const require_migrateFromFireblocks = require('./migrateFromFireblocks-BiZmnKp9.cjs');
-const require_waas = require('./waas-G-4JvdgJ.cjs');
-const require_getNetworkProviderFromNetworkId = require('./getNetworkProviderFromNetworkId-BXoTukxv.cjs');
-const require_getVerifiedCredentialForWalletAccount = require('./getVerifiedCredentialForWalletAccount-upiwolAi.cjs');
-const require_isUserOnboardingComplete = require('./isUserOnboardingComplete-BAL-3zu7.cjs');
-const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-DF65MJNN.cjs');
+const require_logoutWithReason = require('./logoutWithReason-BKwWBsCT.cjs');
+const require_migrateFromFireblocks = require('./migrateFromFireblocks-ycJIYcrm.cjs');
+const require_waas = require('./waas-CioG-_yp.cjs');
+const require_getNetworkProviderFromNetworkId = require('./getNetworkProviderFromNetworkId-Cez8TM-n.cjs');
+const require_getVerifiedCredentialForWalletAccount = require('./getVerifiedCredentialForWalletAccount-UIcOv7IN.cjs');
+const require_isUserOnboardingComplete = require('./isUserOnboardingComplete-FbjleMQm.cjs');
+const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-Czx-uPFY.cjs');
 let _dynamic_labs_sdk_assert_package_version = require("@dynamic-labs-sdk/assert-package-version");
 let _dynamic_labs_sdk_api_core = require("@dynamic-labs/sdk-api-core");
 let zod_mini = require("zod/mini");
@@ -166,57 +166,6 @@ const setupCrossTabEventSync = (client) => {
 	core.crossTabBroadcast.on("deviceRegistrationCompleted", handleCrossTabDeviceRegistrationCompleted);
 };
 
-//#endregion
-//#region src/modules/wallets/unverifiedWalletAccounts/schema.ts
-const unverifiedWalletAccountSchema = zod_mini.object({
-	address: zod_mini.string(),
-	addressesWithTypes: zod_mini.optional(zod_mini.array(zod_mini.object({
-		address: zod_mini.string(),
-		publicKey: zod_mini.optional(zod_mini.string()),
-		type: zod_mini.custom((val) => typeof val === "string")
-	}))),
-	chain: zod_mini.custom((val) => typeof val === "string"),
-	hardwareWalletVendor: zod_mini.optional(zod_mini.custom((val) => typeof val === "string")),
-	id: zod_mini.string(),
-	lastSelectedAt: zod_mini.nullable(zod_mini.date()),
-	walletProviderKey: zod_mini.string()
-});
-
-//#endregion
-//#region src/modules/wallets/walletProvider/walletProviderKeyMap/schema.ts
-const walletProviderKeyMapSchema = zod_mini.record(zod_mini.string(), zod_mini.string());
-
-//#endregion
-//#region src/modules/storageSync/schema.ts
-const stateStorageKeySchema = require_logoutWithReason.createStorageKeySchema({
-	key: "state",
-	schema: zod_mini.object({
-		apiVersion: zod_mini.string(),
-		projectSettings: zod_mini.custom(),
-		unverifiedWalletAccounts: zod_mini.array(unverifiedWalletAccountSchema),
-		user: zod_mini.custom(),
-		walletProviderKeyMap: walletProviderKeyMapSchema
-	})
-});
-const sessionStorageKeySchema = require_logoutWithReason.createStorageKeySchema({
-	config: { storageTier: "secure" },
-	key: "session",
-	schema: zod_mini.object({
-		captchaToken: zod_mini.nullable(zod_mini.string()),
-		elevatedAccessTokens: zod_mini.array(zod_mini.object({
-			expiresAt: zod_mini.number(),
-			scopes: zod_mini.array(zod_mini.string()),
-			singleUse: zod_mini.nullable(zod_mini.boolean()),
-			token: zod_mini.string()
-		})),
-		legacyToken: zod_mini.nullable(zod_mini.string()),
-		mfaToken: zod_mini.nullable(zod_mini.string()),
-		sessionExpiration: zod_mini.number(),
-		sessionKeys: zod_mini.nullable(zod_mini.string()),
-		token: zod_mini.nullable(zod_mini.string())
-	})
-});
-
 //#endregion
 //#region src/modules/keychainMigration/migrateSessionKeyToKeychain/KeyMigrationError.ts
 var KeyMigrationError = class extends require_logoutWithReason.BaseError {
@@ -277,8 +226,8 @@ const migrateSessionKeyToKeychain = async ({ keychain, logger, state, storage })
 	if (importedPublicKey !== publicKey) throw new KeyMigrationError(publicKey, importedPublicKey);
 	logger.debug("[migrateSessionKeyToKeychain] Public key validated, updating state and storage");
 	state.set({ sessionKeys: importedPublicKey });
-	const currentSession = await storage.getItem(sessionStorageKeySchema);
-	if (currentSession) await storage.setItem(sessionStorageKeySchema, {
+	const currentSession = await storage.getItem(require_logoutWithReason.sessionStorageKeySchema);
+	if (currentSession) await storage.setItem(require_logoutWithReason.sessionStorageKeySchema, {
 		...currentSession,
 		sessionKeys: importedPublicKey
 	});
@@ -307,7 +256,7 @@ const hydrateStateWithStorage = async (client) => {
 	const core = require_logoutWithReason.getCore(client);
 	const previousState = core.state.get();
 	const stateChanges = {};
-	const session = await core.storage.getItem(sessionStorageKeySchema);
+	const session = await core.storage.getItem(require_logoutWithReason.sessionStorageKeySchema);
 	const isSessionValid = session?.sessionExpiration && session.sessionExpiration > Date.now();
 	if (isSessionValid) {
 		stateChanges.token = session.token;
@@ -323,7 +272,7 @@ const hydrateStateWithStorage = async (client) => {
 		stateChanges.captchaToken = session.captchaToken;
 		stateChanges.sessionKeys = session.sessionKeys;
 	}
-	const storedState = await core.storage.getItem(stateStorageKeySchema);
+	const storedState = await core.storage.getItem(require_logoutWithReason.stateStorageKeySchema);
 	if (storedState?.apiVersion === require_logoutWithReason.SDK_API_CORE_VERSION) {
 		stateChanges.unverifiedWalletAccounts = storedState.unverifiedWalletAccounts;
 		stateChanges.walletProviderKeyMap = storedState.walletProviderKeyMap;
@@ -340,8 +289,8 @@ const hydrateStateWithStorage = async (client) => {
 const syncStateWithStorage = (client) => {
 	const core = require_logoutWithReason.getCore(client);
 	core.state.subscribe((state) => {
-		if (state.sessionExpiresAt === null) core.storage.removeItem(sessionStorageKeySchema);
-		else core.storage.setItem(sessionStorageKeySchema, {
+		if (state.sessionExpiresAt === null) core.storage.removeItem(require_logoutWithReason.sessionStorageKeySchema);
+		else core.storage.setItem(require_logoutWithReason.sessionStorageKeySchema, {
 			captchaToken: state.captchaToken,
 			elevatedAccessTokens: (state.elevatedAccessTokens || []).map((token) => ({
 				expiresAt: token.expiresAt.getTime(),
@@ -355,7 +304,7 @@ const syncStateWithStorage = (client) => {
 			sessionKeys: state.sessionKeys,
 			token: state.token
 		});
-		core.storage.setItem(stateStorageKeySchema, {
+		core.storage.setItem(require_logoutWithReason.stateStorageKeySchema, {
 			apiVersion: require_logoutWithReason.SDK_API_CORE_VERSION,
 			projectSettings: state.projectSettings,
 			unverifiedWalletAccounts: state.unverifiedWalletAccounts,
@@ -508,7 +457,7 @@ const initializeClient = async (client = require_logoutWithReason.getDefaultClie
 	raiseStateEvents(client);
 	setupCrossTabEventSync(client);
 	const initializeStorageSyncPromise = initializeStorageSync(client);
-	const fetchProjectSettingsPromise = initializeStorageSyncPromise.then(async () => {
+	const migrationPromise = initializeStorageSyncPromise.then(async () => {
 		await migrateSessionKeyToKeychain({
 			keychain: core.keychain,
 			logger: core.logger,
@@ -517,8 +466,13 @@ const initializeClient = async (client = require_logoutWithReason.getDefaultClie
 		}).catch(() => require_logoutWithReason.__logoutWithReason_wrapped({ reason: "keychain-migration-failed" }, client));
 		if (core.state.get().sessionKeys && !await core.keychain.hasKey("session")) await require_logoutWithReason.__logoutWithReason_wrapped({ reason: "keychain-key-missing" }, client);
 		await logoutIfSessionPublicKeyMismatched(client);
-	}).then(async () => {
-		if (!core.state.get().projectSettings) await require_logoutWithReason.fetchProjectSettings(client);
+	});
+	core.initTrack.track({
+		name: require_getNetworkProviderFromNetworkId.MIGRATE_SESSION_KEY_TRACKER_KEY,
+		promise: migrationPromise
+	});
+	const fetchProjectSettingsPromise = initializeStorageSyncPromise.then(async () => {
+		await require_logoutWithReason.fetchProjectSettings(client);
 	});
 	fetchProjectSettingsPromise.then(() => prefetchNoncesIfNeeded(client)).catch((error) => {
 		core.logger.error("Failed to prefetch nonces:", error);
@@ -2158,6 +2112,39 @@ const __signInWithExternalJwt_wrapped = require_logoutWithReason.instrumentFunct
 	getCore: require_logoutWithReason.resolveInstrumentationCore
 });
 
+//#endregion
+//#region src/modules/auth/isSignedIn/isSignedIn.ts
+/**
+* Checks if the user is currently signed in to the Dynamic client.
+*
+* The client is considered to be in a signed in state if a user has
+* authenticated or if the client has at least one wallet connected.
+*
+* @deprecated What counts as "signed in" is your app's business logic, not the
+* SDK's. This helper bakes in one opinion (a user OR any connected wallet),
+* which rarely matches every app and forces a dependency on us for every
+* variation. Compose your own check from the underlying primitives instead —
+* e.g. `Boolean(client.user) || isAnyWalletAccountConnected(client)` — and
+* layer in whatever your app requires (device registration, completed
+* onboarding, satisfied MFA, a required embedded wallet, …). See the
+* "Check if signed in" guide:
+* https://www.dynamic.xyz/docs/javascript/user-session-management
+*
+* @example
+* ```ts
+* if (isSignedIn()) {
+*   console.log('User is authenticated or has a wallet connected');
+* }
+* ```
+*
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns True if the user is signed in, false otherwise.
+* @see logout
+* @see isAnyWalletAccountConnected
+* @notInstrumented
+*/
+const isSignedIn = (client = require_logoutWithReason.getDefaultClient()) => Boolean(client.user || require_logoutWithReason.getWalletAccounts(client).length > 0);
+
 //#endregion
 //#region src/modules/auth/logout/logout.ts
 /**
@@ -10812,7 +10799,7 @@ exports.isMfaRequiredForAction = require_isMfaRequiredForAction.isMfaRequiredFor
 exports.isMobile = isMobile;
 exports.isPendingRecoveryCodesAcknowledgment = require_isUserOnboardingComplete.isPendingRecoveryCodesAcknowledgment;
 exports.isProgrammaticNetworkSwitchAvailable = isProgrammaticNetworkSwitchAvailable;
-exports.isSignedIn = require_logoutWithReason.isSignedIn;
+exports.isSignedIn = isSignedIn;
 exports.isUserMissingMfaAuth = require_logoutWithReason.isUserMissingMfaAuth;
 exports.isUserOnboardingComplete = require_isUserOnboardingComplete.isUserOnboardingComplete;
 exports.isWalletAccountVerified = isWalletAccountVerified;