@dynamic-labs-sdk/client 1.33.2 → 1.33.3

package/dist/{logoutWithReason-C4AgSbjv.native.esm.js → logoutWithReason-DWkIKoLk.native.esm.js}

@@ -1,4 +1,4 @@
-import { Ct as getCore, E as getWalletProviders, G as getSecureCookieAttribute, P as getWalletAccounts, Q as createStorageKeySchema, Tt as DYNAMIC_AUTH_COOKIE_NAME, W as setCookie, _ as checkAndRaiseWalletAccountsChangedEvent, a as resolveInstrumentationCore, bt as getDefaultClient, ct as CLIENT_SDK_NAME, ft as SDK_API_CORE_VERSION, ht as assertDefined, k as emitEvent, lt as DYNAMIC_LOGOUT_REASON_HEADER, mt as isCookieEnabled, n as NoWalletProviderFoundError, o as instrumentFunction, r as createApiClient, t as getWalletProviderFromWalletAccount, wt as BaseError } from "./apiClient-B0eCQXEJ.native.esm.js";
+import { Ct as getCore, E as getWalletProviders, G as getSecureCookieAttribute, P as getWalletAccounts, Q as createStorageKeySchema, Tt as DYNAMIC_AUTH_COOKIE_NAME, W as setCookie, _ as checkAndRaiseWalletAccountsChangedEvent, a as resolveInstrumentationCore, bt as getDefaultClient, ct as CLIENT_SDK_NAME, ft as SDK_API_CORE_VERSION, ht as assertDefined, k as emitEvent, lt as DYNAMIC_LOGOUT_REASON_HEADER, mt as isCookieEnabled, n as NoWalletProviderFoundError, o as instrumentFunction, r as createApiClient, t as getWalletProviderFromWalletAccount, wt as BaseError } from "./apiClient-CpfEx6Uc.native.esm.js";
 import * as z from "zod/mini";
 
 //#region src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts
@@ -284,4 +284,4 @@ const __logoutWithReason_wrapped = instrumentFunction({
 
 //#endregion
 export { stateStorageKeySchema as a, getWalletProviderByKey as c, sessionStorageKeySchema as i, generateSessionKeys as n, retryOnFail as o, fetchProjectSettings as r, getVerifiedCredentialForWalletAccount as s, __logoutWithReason_wrapped as t };
-//# sourceMappingURL=logoutWithReason-C4AgSbjv.native.esm.js.map
+//# sourceMappingURL=logoutWithReason-DWkIKoLk.native.esm.js.map

package/dist/{logoutWithReason-C4AgSbjv.native.esm.js.map → logoutWithReason-DWkIKoLk.native.esm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"logoutWithReason-C4AgSbjv.native.esm.js","names":["walletProvider","walletProvidersMap: Map<string, WalletProvider>"],"sources":["../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts","../src/utils/retryOnFail/InvalidRetryOnFailCallError.ts","../src/utils/retryOnFail/retryOnFail.ts","../src/modules/wallets/unverifiedWalletAccounts/schema.ts","../src/modules/wallets/walletProvider/walletProviderKeyMap/schema.ts","../src/modules/storageSync/schema.ts","../src/modules/projectSettings/fetchProjectSettings/fetchProjectSettings.ts","../src/modules/sessionKeys/generateSessionKeys/generateSessionKeys.ts","../src/modules/wallets/utils/getAvailableWalletProvidersFromWalletAccounts/getAvailableWalletProvidersFromWalletAccounts.ts","../src/modules/wallets/destroyWalletProviders/destroyWalletProviders.ts","../src/modules/auth/logoutWithReason/logoutWithReason.ts"],"sourcesContent":["import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\nimport type { WalletProvider } from '../walletProvider';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @notInstrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n): WalletProvider => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n","import type { JwtVerifiedCredential } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n): JwtVerifiedCredential | undefined => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n","import { BaseError } from '../../errors/base';\n\n/**\n * This error is thrown when the `retryOnFail` function is called with an invalid\n * number of retries (i.e. less than 0).\n */\nexport class InvalidRetryOnFailCallError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(maxRetries: number) {\n    super({\n      cause: null,\n      code: 'invalid_retry_on_fail_call_error',\n      docsUrl: null,\n      name: 'InvalidRetryOnFailCallError',\n      shortMessage: `Invalid retries parameter for retryOnFail call: ${maxRetries}`,\n    });\n  }\n}\n","import { InvalidRetryOnFailCallError } from './InvalidRetryOnFailCallError';\n\nexport type RetryOnFailParams<T> = {\n  /**\n   * The delay between retries in milliseconds.\n   */\n  delay?: number;\n  /**\n   * The function to call.\n   */\n  fn: () => Promise<T>;\n  /**\n   * The maximum number of retries.\n   *\n   * When set to 0, the function will be called only once and is\n   * therefore equivalent to calling the function directly.\n   */\n  maxRetries: number;\n};\n\n/** @notInstrumented */\nexport const retryOnFail = async <T>({\n  delay = 0,\n  fn,\n  maxRetries,\n}: RetryOnFailParams<T>): Promise<T> => {\n  for (let retry = 0; retry <= maxRetries; retry++) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (retry >= maxRetries) {\n        throw error;\n      }\n\n      if (delay > 0) {\n        await new Promise((resolve) => setTimeout(resolve, delay));\n      }\n    }\n  }\n\n  /**\n   * Reaching this point should never happen and this\n   * error is thrown to help us debug the issue.\n   */\n  throw new InvalidRetryOnFailCallError(maxRetries);\n};\n","import * as z from 'zod/mini';\n\nimport type { Chain } from '../../chain';\nimport type { HardwareWalletVendor } from '../hardwareWallet/hardwareWallet.types';\nimport type { WalletAddressType } from '../walletAccount';\n\nexport const unverifiedWalletAccountSchema = z.object({\n  address: z.string(),\n  addressesWithTypes: z.optional(\n    z.array(\n      z.object({\n        address: z.string(),\n        publicKey: z.optional(z.string()),\n        type: z.custom<WalletAddressType>((val) => typeof val === 'string'),\n      })\n    )\n  ),\n  chain: z.custom<Chain>((val) => typeof val === 'string'),\n  hardwareWalletVendor: z.optional(\n    z.custom<HardwareWalletVendor>((val) => typeof val === 'string')\n  ),\n  id: z.string(),\n  lastSelectedAt: z.nullable(z.date()),\n  walletProviderKey: z.string(),\n});\n","import * as z from 'zod/mini';\n\nexport const walletProviderKeyMapSchema = z.record(z.string(), z.string());\n","import type { ProjectSettings } from '@dynamic-labs/sdk-api-core';\nimport * as z from 'zod/mini';\n\nimport { createStorageKeySchema } from '../../services/storage';\nimport { unverifiedWalletAccountSchema } from '../wallets/unverifiedWalletAccounts';\nimport { walletProviderKeyMapSchema } from '../wallets/walletProvider/walletProviderKeyMap/schema';\nimport type { User } from '../user/user.types';\n\nexport const stateStorageKeySchema = createStorageKeySchema({\n  key: 'state',\n  schema: z.object({\n    apiVersion: z.string(),\n    projectSettings: z.custom<ProjectSettings | null>(),\n    unverifiedWalletAccounts: z.array(unverifiedWalletAccountSchema),\n    user: z.custom<User | null>(),\n    walletProviderKeyMap: walletProviderKeyMapSchema,\n  }),\n});\n\nexport const sessionStorageKeySchema = createStorageKeySchema({\n  config: { storageTier: 'secure' },\n  key: 'session',\n  schema: z.object({\n    /**\n     * The current available captcha token.\n     */\n    captchaToken: z.nullable(z.string()),\n\n    /**\n     * The current available elevated access tokens.\n     */\n    elevatedAccessTokens: z.array(\n      z.object({\n        /**\n         * Milliseconds since epoch of token expiration.\n         */\n        expiresAt: z.number(),\n        /**\n         * The scopes of the token.\n         */\n        scopes: z.array(z.string()),\n        /**\n         * Whether the token is single use.\n         */\n        singleUse: z.nullable(z.boolean()),\n        /**\n         * The token string.\n         */\n        token: z.string(),\n      })\n    ),\n\n    /**\n     * Legacy token will be undefined in environments with cookie based sessions.\n     *\n     * @deprecated Use `token` instead.\n     */\n    legacyToken: z.nullable(z.string()),\n\n    /**\n     * The current available MFA token.\n     */\n    mfaToken: z.nullable(z.string()),\n\n    /**\n     * Milliseconds since epoch of session expiration.\n     */\n    sessionExpiration: z.number(),\n\n    /**\n     * The current session keys.\n     */\n    sessionKeys: z.nullable(z.string()),\n\n    /**\n     * Token will be undefined in environments with cookie based sessions.\n     */\n    token: z.nullable(z.string()),\n  }),\n});\n","import type { ProjectSettings } from '../projectSettings.types';\nimport { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { SDK_API_CORE_VERSION } from '../../../constants';\nimport { retryOnFail } from '../../../utils/retryOnFail';\nimport { createApiClient } from '../../apiClient';\nimport { CLIENT_SDK_NAME } from '../../apiClient/constants';\nimport { stateStorageKeySchema } from '../../storageSync/schema';\n\n/**\n * Fetches and updates the project settings from the API.\n *\n * This function retrieves the latest project configuration settings\n * from Dynamic's servers, including authentication options, enabled chains,\n * and security configurations. It always performs a live fetch. If the API\n * call fails, it falls back to the last known-good settings from storage,\n * provided they were saved by a matching SDK API version.\n *\n * @example\n * ```ts\n * const settings = await fetchProjectSettings();\n * console.log('Enabled chains:', settings.chains);\n * ```\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the updated project settings.\n * @throws {Error} Rethrows the original fetch error when no matching-version cached settings exist.\n * @see createDynamicClient\n * @see initializeClient\n * @notInstrumented\n * @noHook Internal settings fetch that is not part of the public hook surface.\n */\nexport const fetchProjectSettings = async (\n  client = getDefaultClient()\n): Promise<ProjectSettings | null> => {\n  const core = getCore(client);\n\n  const apiClient = createApiClient({}, client);\n\n  core.logger.debug('[fetchProjectSettings] Fetching project settings...');\n\n  const doFetch = async () =>\n    apiClient.getEnvironmentSettings(\n      {\n        environmentId: core.environmentId,\n        sdkVersion: `${CLIENT_SDK_NAME}/${core.version}`,\n      },\n      {\n        credentials: 'omit',\n      }\n    );\n\n  const projectSettings = await retryOnFail({\n    fn: doFetch,\n    maxRetries: 2,\n  }).catch(async (error) => {\n    const cachedState = await core.storage\n      .getItem(stateStorageKeySchema)\n      .catch(() => null);\n\n    if (\n      cachedState?.apiVersion === SDK_API_CORE_VERSION &&\n      cachedState.projectSettings\n    ) {\n      core.logger.error(\n        '[fetchProjectSettings] Failed to fetch project settings, falling back to cached settings',\n        error\n      );\n\n      return cachedState.projectSettings;\n    }\n\n    core.logger.error(\n      '[fetchProjectSettings] Failed to fetch project settings and no cached settings are available',\n      error\n    );\n\n    throw error;\n  });\n\n  core.state.set({ projectSettings: projectSettings ?? null });\n\n  return projectSettings;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport type { SessionKeys } from '../sessionKeys.types';\n\n/** @notInstrumented */\nexport const generateSessionKeys = async (\n  client: DynamicClient\n): Promise<SessionKeys> => {\n  const core = getCore(client);\n\n  const currentState = core.state.get();\n\n  const isRotation = Boolean(currentState.sessionKeys);\n\n  const logContext = {\n    environmentId: core.environmentId,\n    operation: isRotation ? 'rotate' : 'create',\n    userId: currentState.user?.id ?? null,\n  };\n\n  core.logger.info(\n    isRotation\n      ? '[generateSessionKeys] Rotating session key...'\n      : '[generateSessionKeys] Creating session key...',\n    logContext\n  );\n\n  await core.keychain.removeKey('session');\n\n  const publicKey = await core.keychain.generateKey('session');\n\n  assertDefined(publicKey, 'Public key not found');\n\n  core.state.set({\n    sessionKeys: publicKey,\n  });\n\n  core.logger.info(\n    isRotation\n      ? '[generateSessionKeys] Session key rotated'\n      : '[generateSessionKeys] Session key created',\n    logContext\n  );\n\n  return { publicKey };\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { getWalletAccounts } from '../../getWalletAccounts';\nimport type { WalletProvider } from '../../walletProvider';\nimport { getWalletProviderFromWalletAccount } from '../getWalletProviderFromWalletAccount';\n\n/** @notInstrumented */\nexport const getAvailableWalletProvidersFromWalletAccounts = (\n  client: DynamicClient\n): WalletProvider[] => {\n  const core = getCore(client);\n\n  const walletProvidersMap: Map<string, WalletProvider> = new Map();\n\n  const walletAccounts = getWalletAccounts(client);\n\n  walletAccounts.forEach((walletAccount) => {\n    if (walletProvidersMap.has(walletAccount.walletProviderKey)) {\n      return;\n    }\n\n    try {\n      const walletProvider = getWalletProviderFromWalletAccount(\n        {\n          walletAccount,\n        },\n        client\n      );\n\n      walletProvidersMap.set(walletAccount.walletProviderKey, walletProvider);\n    } catch (error) {\n      core.logger.debug('Wallet provider not found for wallet account', {\n        error,\n        walletAccount: walletAccount.address,\n      });\n    }\n  });\n\n  return Array.from(walletProvidersMap.values());\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { LogoutReason } from '../../auth/logoutReason';\nimport { getAvailableWalletProvidersFromWalletAccounts } from '../utils/getAvailableWalletProvidersFromWalletAccounts';\n\n/**\n * Tear down every wallet provider on the client.\n *\n * Each provider's `destroy` is responsible for its own local + remote\n * cleanup. We swallow errors so a failing destroy on one provider does not\n * block teardown of the others (e.g. during logout).\n *\n * @notInstrumented\n */\nexport const destroyWalletProviders = async (\n  { reason }: { reason?: LogoutReason },\n  client: DynamicClient\n): Promise<void> => {\n  const core = getCore(client);\n\n  const walletProviders = getAvailableWalletProvidersFromWalletAccounts(client);\n\n  await Promise.all(\n    walletProviders.map(async (walletProvider) => {\n      if (!walletProvider.destroy) return;\n      try {\n        await walletProvider.destroy({ reason });\n      } catch (err) {\n        core.logger.error(\n          `Error destroying wallet provider ${walletProvider.key}`,\n          err\n        );\n      }\n    })\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { getCore } from '../../../client/core/getCore';\nimport { getSecureCookieAttribute } from '../../../utils/getSecureCookieAttribute';\nimport { setCookie } from '../../../utils/setCookie';\nimport { createApiClient } from '../../apiClient';\nimport { DYNAMIC_LOGOUT_REASON_HEADER } from '../../apiClient/constants';\nimport { emitEvent } from '../../clientEvents';\nimport { fetchProjectSettings } from '../../projectSettings/fetchProjectSettings';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { generateSessionKeys } from '../../sessionKeys/generateSessionKeys';\nimport { destroyWalletProviders } from '../../wallets/destroyWalletProviders';\nimport { DYNAMIC_AUTH_COOKIE_NAME } from '../consts';\nimport type { LogoutReason } from '../logoutReason';\nimport { checkAndRaiseWalletAccountsChangedEvent } from '../updateAuthFromVerifyResponse/checkAndRaiseWalletAccountsChangedEvent';\n\n/**\n * Logs the user out with an explicit reason.\n *\n * Revokes the session, clears auth state, terminates wallet providers, and\n * emits the `logout` client event with the given reason. The reason is also\n * captured as an argument on the function-instrumentation event, which is\n * how Datadog distinguishes between different logout causes.\n *\n * Use this instead of the public `logout` when triggering a logout from\n * internal or extension code — the caller owns the reason string, so the\n * telemetry correctly attributes *why* the logout happened.\n *\n * @param params - The logout params.\n * @param params.reason - Why the logout is being triggered. Extension authors\n *   needing a reason outside the SDK catalog can cast with `as LogoutReason`.\n * @param client - The Dynamic client instance.\n * @instrumented\n */\nexport const logoutWithReason = async (\n  { reason }: { reason: LogoutReason },\n  client: DynamicClient\n): Promise<void> => {\n  const core = getCore(client);\n\n  core.logger.debug('[logoutWithReason] Logging out...', { reason });\n\n  await destroyWalletProviders({ reason }, client);\n\n  if (client.user !== null) {\n    // Forward the logout reason so the backend can attribute the revocation in\n    // Datadog instead of it being inferred from downstream 401s.\n    const apiClient = createApiClient(\n      { headers: { [DYNAMIC_LOGOUT_REASON_HEADER]: reason } },\n      client\n    );\n\n    try {\n      await apiClient.revokeSession({\n        environmentId: core.environmentId,\n      });\n    } catch (error) {\n      core.logger.error('Failed to revoke session', error);\n    }\n\n    /**\n     * This deletes the auth cookie if it exists.\n     * If the cookie doesn't exist, this sets a new cookie that expires immediately.\n     */\n    if (isCookieEnabled(client)) {\n      // Match the Secure attribute used when the cookie was written so the\n      // deletion cookie is accepted consistently in a secure context.\n      const secureAttribute = getSecureCookieAttribute();\n\n      setCookie(\n        `${DYNAMIC_AUTH_COOKIE_NAME}=; Max-Age=-99999999; path=/; SameSite=Lax${secureAttribute}`\n      );\n    }\n  }\n\n  await core.keychain.removeKey('session');\n\n  const previousState = core.state.get();\n\n  core.state.set({\n    captchaToken: null,\n    elevatedAccessTokens: [],\n    legacyToken: null,\n    mfaToken: null,\n    sessionExpiresAt: null,\n    sessionKeys: null,\n    token: null,\n    unverifiedWalletAccounts: [],\n    user: null,\n  });\n\n  emitEvent({ args: { reason }, event: 'logout' }, client);\n  // core.state.set above has no subscribers of its own, so this is the only\n  // way listeners relying on getWalletAccounts() (e.g. chain extensions\n  // reconciling a wallet provider's registration) learn the accounts are\n  // gone. We diff against the pre-logout snapshot so this only fires when\n  // there actually were wallet accounts to lose.\n  checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);\n\n  // Refetch project settings\n  void fetchProjectSettings(client);\n\n  // Regenerate session keys\n  void generateSessionKeys(client);\n};\n"],"mappings":";;;;;AAUA,MAAa,0BACX,EAAE,qBACF,WACmB;CAGnB,MAAM,iBAFkB,mBAAmB,OAAO,CAEX,MACpC,qBAAmBA,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAI,2BAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO;;;;;;ACdT,MAAa,yCACX,EAAE,iBACF,WACsC;AACtC,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC;;;;;;;;;ACVH,IAAa,8BAAb,cAAiD,UAAU;CAEzD,YAAY,YAAoB;AAC9B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mDAAmD;GAClE,CAAC;;;;;;;ACMN,MAAa,cAAc,OAAU,EACnC,QAAQ,GACR,IACA,iBACsC;AACtC,MAAK,IAAI,QAAQ,GAAG,SAAS,YAAY,QACvC,KAAI;AACF,SAAO,MAAM,IAAI;UACV,OAAO;AACd,MAAI,SAAS,WACX,OAAM;AAGR,MAAI,QAAQ,EACV,OAAM,IAAI,SAAS,YAAY,WAAW,SAAS,MAAM,CAAC;;;;;;AAShE,OAAM,IAAI,4BAA4B,WAAW;;;;;ACtCnD,MAAa,gCAAgC,EAAE,OAAO;CACpD,SAAS,EAAE,QAAQ;CACnB,oBAAoB,EAAE,SACpB,EAAE,MACA,EAAE,OAAO;EACP,SAAS,EAAE,QAAQ;EACnB,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;EACjC,MAAM,EAAE,QAA2B,QAAQ,OAAO,QAAQ,SAAS;EACpE,CAAC,CACH,CACF;CACD,OAAO,EAAE,QAAe,QAAQ,OAAO,QAAQ,SAAS;CACxD,sBAAsB,EAAE,SACtB,EAAE,QAA8B,QAAQ,OAAO,QAAQ,SAAS,CACjE;CACD,IAAI,EAAE,QAAQ;CACd,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC;CACpC,mBAAmB,EAAE,QAAQ;CAC9B,CAAC;;;;ACtBF,MAAa,6BAA6B,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC;;;;ACM1E,MAAa,wBAAwB,uBAAuB;CAC1D,KAAK;CACL,QAAQ,EAAE,OAAO;EACf,YAAY,EAAE,QAAQ;EACtB,iBAAiB,EAAE,QAAgC;EACnD,0BAA0B,EAAE,MAAM,8BAA8B;EAChE,MAAM,EAAE,QAAqB;EAC7B,sBAAsB;EACvB,CAAC;CACH,CAAC;AAEF,MAAa,0BAA0B,uBAAuB;CAC5D,QAAQ,EAAE,aAAa,UAAU;CACjC,KAAK;CACL,QAAQ,EAAE,OAAO;EAIf,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC;EAKpC,sBAAsB,EAAE,MACtB,EAAE,OAAO;GAIP,WAAW,EAAE,QAAQ;GAIrB,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;GAI3B,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC;GAIlC,OAAO,EAAE,QAAQ;GAClB,CAAC,CACH;EAOD,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC;EAKnC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;EAKhC,mBAAmB,EAAE,QAAQ;EAK7B,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC;EAKnC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC9B,CAAC;CACH,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;AC/CF,MAAa,uBAAuB,OAClC,SAAS,kBAAkB,KACS;CACpC,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,YAAY,gBAAgB,EAAE,EAAE,OAAO;AAE7C,MAAK,OAAO,MAAM,sDAAsD;CAExE,MAAM,UAAU,YACd,UAAU,uBACR;EACE,eAAe,KAAK;EACpB,YAAY,GAAG,gBAAgB,GAAG,KAAK;EACxC,EACD,EACE,aAAa,QACd,CACF;CAEH,MAAM,kBAAkB,MAAM,YAAY;EACxC,IAAI;EACJ,YAAY;EACb,CAAC,CAAC,MAAM,OAAO,UAAU;EACxB,MAAM,cAAc,MAAM,KAAK,QAC5B,QAAQ,sBAAsB,CAC9B,YAAY,KAAK;AAEpB,MACE,aAAa,eAAe,wBAC5B,YAAY,iBACZ;AACA,QAAK,OAAO,MACV,4FACA,MACD;AAED,UAAO,YAAY;;AAGrB,OAAK,OAAO,MACV,gGACA,MACD;AAED,QAAM;GACN;AAEF,MAAK,MAAM,IAAI,EAAE,iBAAiB,mBAAmB,MAAM,CAAC;AAE5D,QAAO;;;;;;AC5ET,MAAa,sBAAsB,OACjC,WACyB;CACzB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,eAAe,KAAK,MAAM,KAAK;CAErC,MAAM,aAAa,QAAQ,aAAa,YAAY;CAEpD,MAAM,aAAa;EACjB,eAAe,KAAK;EACpB,WAAW,aAAa,WAAW;EACnC,QAAQ,aAAa,MAAM,MAAM;EAClC;AAED,MAAK,OAAO,KACV,aACI,kDACA,iDACJ,WACD;AAED,OAAM,KAAK,SAAS,UAAU,UAAU;CAExC,MAAM,YAAY,MAAM,KAAK,SAAS,YAAY,UAAU;AAE5D,eAAc,WAAW,uBAAuB;AAEhD,MAAK,MAAM,IAAI,EACb,aAAa,WACd,CAAC;AAEF,MAAK,OAAO,KACV,aACI,8CACA,6CACJ,WACD;AAED,QAAO,EAAE,WAAW;;;;;;ACtCtB,MAAa,iDACX,WACqB;CACrB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAMC,qCAAkD,IAAI,KAAK;AAIjE,CAFuB,kBAAkB,OAAO,CAEjC,SAAS,kBAAkB;AACxC,MAAI,mBAAmB,IAAI,cAAc,kBAAkB,CACzD;AAGF,MAAI;GACF,MAAM,iBAAiB,mCACrB,EACE,eACD,EACD,OACD;AAED,sBAAmB,IAAI,cAAc,mBAAmB,eAAe;WAChE,OAAO;AACd,QAAK,OAAO,MAAM,gDAAgD;IAChE;IACA,eAAe,cAAc;IAC9B,CAAC;;GAEJ;AAEF,QAAO,MAAM,KAAK,mBAAmB,QAAQ,CAAC;;;;;;;;;;;;;;ACxBhD,MAAa,yBAAyB,OACpC,EAAE,UACF,WACkB;CAClB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,kBAAkB,8CAA8C,OAAO;AAE7E,OAAM,QAAQ,IACZ,gBAAgB,IAAI,OAAO,mBAAmB;AAC5C,MAAI,CAAC,eAAe,QAAS;AAC7B,MAAI;AACF,SAAM,eAAe,QAAQ,EAAE,QAAQ,CAAC;WACjC,KAAK;AACZ,QAAK,OAAO,MACV,oCAAoC,eAAe,OACnD,IACD;;GAEH,CACH;;;;;;;;;;;;;;;;;;;;;;;ACCH,MAAE,mBAAQ,OACR,EAAC,UACD;CAEA,MAAK,OAAO,QAAQ,OAAA;AAEpB,MAAK,OAAC,MAAA,qCAA0C,EAAA,QAAA,CAAA;AAEhD,OAAI,uBAAsB,EAAA,QAAA,EAAA,OAAA;AAE1B,KAAI,OAAC,SAAe,MAAM;EAGxB,MAAE,YAAA,gBACD,EAAA,SAAA,GAAA,+BAAA,QAAA,EAAA,SAED;AAEA,MAAI;AACF,SAAE,UAAA,cAAA,EACF,eAAc,KAAA,eACd,CAAA;WACF,OAAA;;;;;;;AAQA,MAAI,gBAAgB,OAAI,CAKtB,WACF,GAAA,yBAAA,4CAHW,0BAAA,GAIb;;AAIA,OAAM,KAAA,SAAc,UAAO,UAAW;CAEtC,MAAK,gBAAU,KAAA,MAAA,KAAA;AAEf,MAAE,MAAA,IAAA;EACA,cAAa;EACb,sBAAc,EAAA;EACd,aAAA;EACA,UAAA;EACA,kBAAW;EACX,aAAA;EACA,OAAM;EACN,0BAAA,EAAA;;EAEF,CAAA;AAEA,WAAO;EAAA,MAAU,EAAA,QAAW;EAAA,OAAA;EAAmB,EAAE,OAAK;AAMtD,yCAAmB,EAAA,eAAA,EAAA,OAAA;AAGnB,CAAG,qBAAmB,OAAA"}
+{"version":3,"file":"logoutWithReason-DWkIKoLk.native.esm.js","names":["walletProvider","walletProvidersMap: Map<string, WalletProvider>"],"sources":["../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts","../src/utils/retryOnFail/InvalidRetryOnFailCallError.ts","../src/utils/retryOnFail/retryOnFail.ts","../src/modules/wallets/unverifiedWalletAccounts/schema.ts","../src/modules/wallets/walletProvider/walletProviderKeyMap/schema.ts","../src/modules/storageSync/schema.ts","../src/modules/projectSettings/fetchProjectSettings/fetchProjectSettings.ts","../src/modules/sessionKeys/generateSessionKeys/generateSessionKeys.ts","../src/modules/wallets/utils/getAvailableWalletProvidersFromWalletAccounts/getAvailableWalletProvidersFromWalletAccounts.ts","../src/modules/wallets/destroyWalletProviders/destroyWalletProviders.ts","../src/modules/auth/logoutWithReason/logoutWithReason.ts"],"sourcesContent":["import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\nimport type { WalletProvider } from '../walletProvider';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @notInstrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n): WalletProvider => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n","import type { JwtVerifiedCredential } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n): JwtVerifiedCredential | undefined => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n","import { BaseError } from '../../errors/base';\n\n/**\n * This error is thrown when the `retryOnFail` function is called with an invalid\n * number of retries (i.e. less than 0).\n */\nexport class InvalidRetryOnFailCallError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(maxRetries: number) {\n    super({\n      cause: null,\n      code: 'invalid_retry_on_fail_call_error',\n      docsUrl: null,\n      name: 'InvalidRetryOnFailCallError',\n      shortMessage: `Invalid retries parameter for retryOnFail call: ${maxRetries}`,\n    });\n  }\n}\n","import { InvalidRetryOnFailCallError } from './InvalidRetryOnFailCallError';\n\nexport type RetryOnFailParams<T> = {\n  /**\n   * The delay between retries in milliseconds.\n   */\n  delay?: number;\n  /**\n   * The function to call.\n   */\n  fn: () => Promise<T>;\n  /**\n   * The maximum number of retries.\n   *\n   * When set to 0, the function will be called only once and is\n   * therefore equivalent to calling the function directly.\n   */\n  maxRetries: number;\n};\n\n/** @notInstrumented */\nexport const retryOnFail = async <T>({\n  delay = 0,\n  fn,\n  maxRetries,\n}: RetryOnFailParams<T>): Promise<T> => {\n  for (let retry = 0; retry <= maxRetries; retry++) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (retry >= maxRetries) {\n        throw error;\n      }\n\n      if (delay > 0) {\n        await new Promise((resolve) => setTimeout(resolve, delay));\n      }\n    }\n  }\n\n  /**\n   * Reaching this point should never happen and this\n   * error is thrown to help us debug the issue.\n   */\n  throw new InvalidRetryOnFailCallError(maxRetries);\n};\n","import * as z from 'zod/mini';\n\nimport type { Chain } from '../../chain';\nimport type { HardwareWalletVendor } from '../hardwareWallet/hardwareWallet.types';\nimport type { WalletAddressType } from '../walletAccount';\n\nexport const unverifiedWalletAccountSchema = z.object({\n  address: z.string(),\n  addressesWithTypes: z.optional(\n    z.array(\n      z.object({\n        address: z.string(),\n        publicKey: z.optional(z.string()),\n        type: z.custom<WalletAddressType>((val) => typeof val === 'string'),\n      })\n    )\n  ),\n  chain: z.custom<Chain>((val) => typeof val === 'string'),\n  hardwareWalletVendor: z.optional(\n    z.custom<HardwareWalletVendor>((val) => typeof val === 'string')\n  ),\n  id: z.string(),\n  lastSelectedAt: z.nullable(z.date()),\n  walletProviderKey: z.string(),\n});\n","import * as z from 'zod/mini';\n\nexport const walletProviderKeyMapSchema = z.record(z.string(), z.string());\n","import type { ProjectSettings } from '@dynamic-labs/sdk-api-core';\nimport * as z from 'zod/mini';\n\nimport { createStorageKeySchema } from '../../services/storage';\nimport { unverifiedWalletAccountSchema } from '../wallets/unverifiedWalletAccounts';\nimport { walletProviderKeyMapSchema } from '../wallets/walletProvider/walletProviderKeyMap/schema';\nimport type { User } from '../user/user.types';\n\nexport const stateStorageKeySchema = createStorageKeySchema({\n  key: 'state',\n  schema: z.object({\n    apiVersion: z.string(),\n    projectSettings: z.custom<ProjectSettings | null>(),\n    unverifiedWalletAccounts: z.array(unverifiedWalletAccountSchema),\n    user: z.custom<User | null>(),\n    walletProviderKeyMap: walletProviderKeyMapSchema,\n  }),\n});\n\nexport const sessionStorageKeySchema = createStorageKeySchema({\n  config: { storageTier: 'secure' },\n  key: 'session',\n  schema: z.object({\n    /**\n     * The current available captcha token.\n     */\n    captchaToken: z.nullable(z.string()),\n\n    /**\n     * The current available elevated access tokens.\n     */\n    elevatedAccessTokens: z.array(\n      z.object({\n        /**\n         * Milliseconds since epoch of token expiration.\n         */\n        expiresAt: z.number(),\n        /**\n         * The scopes of the token.\n         */\n        scopes: z.array(z.string()),\n        /**\n         * Whether the token is single use.\n         */\n        singleUse: z.nullable(z.boolean()),\n        /**\n         * The token string.\n         */\n        token: z.string(),\n      })\n    ),\n\n    /**\n     * Legacy token will be undefined in environments with cookie based sessions.\n     *\n     * @deprecated Use `token` instead.\n     */\n    legacyToken: z.nullable(z.string()),\n\n    /**\n     * The current available MFA token.\n     */\n    mfaToken: z.nullable(z.string()),\n\n    /**\n     * Milliseconds since epoch of session expiration.\n     */\n    sessionExpiration: z.number(),\n\n    /**\n     * The current session keys.\n     */\n    sessionKeys: z.nullable(z.string()),\n\n    /**\n     * Token will be undefined in environments with cookie based sessions.\n     */\n    token: z.nullable(z.string()),\n  }),\n});\n","import type { ProjectSettings } from '../projectSettings.types';\nimport { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { SDK_API_CORE_VERSION } from '../../../constants';\nimport { retryOnFail } from '../../../utils/retryOnFail';\nimport { createApiClient } from '../../apiClient';\nimport { CLIENT_SDK_NAME } from '../../apiClient/constants';\nimport { stateStorageKeySchema } from '../../storageSync/schema';\n\n/**\n * Fetches and updates the project settings from the API.\n *\n * This function retrieves the latest project configuration settings\n * from Dynamic's servers, including authentication options, enabled chains,\n * and security configurations. It always performs a live fetch. If the API\n * call fails, it falls back to the last known-good settings from storage,\n * provided they were saved by a matching SDK API version.\n *\n * @example\n * ```ts\n * const settings = await fetchProjectSettings();\n * console.log('Enabled chains:', settings.chains);\n * ```\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the updated project settings.\n * @throws {Error} Rethrows the original fetch error when no matching-version cached settings exist.\n * @see createDynamicClient\n * @see initializeClient\n * @notInstrumented\n * @noHook Internal settings fetch that is not part of the public hook surface.\n */\nexport const fetchProjectSettings = async (\n  client = getDefaultClient()\n): Promise<ProjectSettings | null> => {\n  const core = getCore(client);\n\n  const apiClient = createApiClient({}, client);\n\n  core.logger.debug('[fetchProjectSettings] Fetching project settings...');\n\n  const doFetch = async () =>\n    apiClient.getEnvironmentSettings(\n      {\n        environmentId: core.environmentId,\n        sdkVersion: `${CLIENT_SDK_NAME}/${core.version}`,\n      },\n      {\n        credentials: 'omit',\n      }\n    );\n\n  const projectSettings = await retryOnFail({\n    fn: doFetch,\n    maxRetries: 2,\n  }).catch(async (error) => {\n    const cachedState = await core.storage\n      .getItem(stateStorageKeySchema)\n      .catch(() => null);\n\n    if (\n      cachedState?.apiVersion === SDK_API_CORE_VERSION &&\n      cachedState.projectSettings\n    ) {\n      core.logger.error(\n        '[fetchProjectSettings] Failed to fetch project settings, falling back to cached settings',\n        error\n      );\n\n      return cachedState.projectSettings;\n    }\n\n    core.logger.error(\n      '[fetchProjectSettings] Failed to fetch project settings and no cached settings are available',\n      error\n    );\n\n    throw error;\n  });\n\n  core.state.set({ projectSettings: projectSettings ?? null });\n\n  return projectSettings;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport type { SessionKeys } from '../sessionKeys.types';\n\n/** @notInstrumented */\nexport const generateSessionKeys = async (\n  client: DynamicClient\n): Promise<SessionKeys> => {\n  const core = getCore(client);\n\n  const currentState = core.state.get();\n\n  const isRotation = Boolean(currentState.sessionKeys);\n\n  const logContext = {\n    environmentId: core.environmentId,\n    operation: isRotation ? 'rotate' : 'create',\n    userId: currentState.user?.id ?? null,\n  };\n\n  core.logger.info(\n    isRotation\n      ? '[generateSessionKeys] Rotating session key...'\n      : '[generateSessionKeys] Creating session key...',\n    logContext\n  );\n\n  await core.keychain.removeKey('session');\n\n  const publicKey = await core.keychain.generateKey('session');\n\n  assertDefined(publicKey, 'Public key not found');\n\n  core.state.set({\n    sessionKeys: publicKey,\n  });\n\n  core.logger.info(\n    isRotation\n      ? '[generateSessionKeys] Session key rotated'\n      : '[generateSessionKeys] Session key created',\n    logContext\n  );\n\n  return { publicKey };\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { getWalletAccounts } from '../../getWalletAccounts';\nimport type { WalletProvider } from '../../walletProvider';\nimport { getWalletProviderFromWalletAccount } from '../getWalletProviderFromWalletAccount';\n\n/** @notInstrumented */\nexport const getAvailableWalletProvidersFromWalletAccounts = (\n  client: DynamicClient\n): WalletProvider[] => {\n  const core = getCore(client);\n\n  const walletProvidersMap: Map<string, WalletProvider> = new Map();\n\n  const walletAccounts = getWalletAccounts(client);\n\n  walletAccounts.forEach((walletAccount) => {\n    if (walletProvidersMap.has(walletAccount.walletProviderKey)) {\n      return;\n    }\n\n    try {\n      const walletProvider = getWalletProviderFromWalletAccount(\n        {\n          walletAccount,\n        },\n        client\n      );\n\n      walletProvidersMap.set(walletAccount.walletProviderKey, walletProvider);\n    } catch (error) {\n      core.logger.debug('Wallet provider not found for wallet account', {\n        error,\n        walletAccount: walletAccount.address,\n      });\n    }\n  });\n\n  return Array.from(walletProvidersMap.values());\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { LogoutReason } from '../../auth/logoutReason';\nimport { getAvailableWalletProvidersFromWalletAccounts } from '../utils/getAvailableWalletProvidersFromWalletAccounts';\n\n/**\n * Tear down every wallet provider on the client.\n *\n * Each provider's `destroy` is responsible for its own local + remote\n * cleanup. We swallow errors so a failing destroy on one provider does not\n * block teardown of the others (e.g. during logout).\n *\n * @notInstrumented\n */\nexport const destroyWalletProviders = async (\n  { reason }: { reason?: LogoutReason },\n  client: DynamicClient\n): Promise<void> => {\n  const core = getCore(client);\n\n  const walletProviders = getAvailableWalletProvidersFromWalletAccounts(client);\n\n  await Promise.all(\n    walletProviders.map(async (walletProvider) => {\n      if (!walletProvider.destroy) return;\n      try {\n        await walletProvider.destroy({ reason });\n      } catch (err) {\n        core.logger.error(\n          `Error destroying wallet provider ${walletProvider.key}`,\n          err\n        );\n      }\n    })\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { getCore } from '../../../client/core/getCore';\nimport { getSecureCookieAttribute } from '../../../utils/getSecureCookieAttribute';\nimport { setCookie } from '../../../utils/setCookie';\nimport { createApiClient } from '../../apiClient';\nimport { DYNAMIC_LOGOUT_REASON_HEADER } from '../../apiClient/constants';\nimport { emitEvent } from '../../clientEvents';\nimport { fetchProjectSettings } from '../../projectSettings/fetchProjectSettings';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { generateSessionKeys } from '../../sessionKeys/generateSessionKeys';\nimport { destroyWalletProviders } from '../../wallets/destroyWalletProviders';\nimport { DYNAMIC_AUTH_COOKIE_NAME } from '../consts';\nimport type { LogoutReason } from '../logoutReason';\nimport { checkAndRaiseWalletAccountsChangedEvent } from '../updateAuthFromVerifyResponse/checkAndRaiseWalletAccountsChangedEvent';\n\n/**\n * Logs the user out with an explicit reason.\n *\n * Revokes the session, clears auth state, terminates wallet providers, and\n * emits the `logout` client event with the given reason. The reason is also\n * captured as an argument on the function-instrumentation event, which is\n * how Datadog distinguishes between different logout causes.\n *\n * Use this instead of the public `logout` when triggering a logout from\n * internal or extension code — the caller owns the reason string, so the\n * telemetry correctly attributes *why* the logout happened.\n *\n * @param params - The logout params.\n * @param params.reason - Why the logout is being triggered. Extension authors\n *   needing a reason outside the SDK catalog can cast with `as LogoutReason`.\n * @param client - The Dynamic client instance.\n * @instrumented\n */\nexport const logoutWithReason = async (\n  { reason }: { reason: LogoutReason },\n  client: DynamicClient\n): Promise<void> => {\n  const core = getCore(client);\n\n  core.logger.debug('[logoutWithReason] Logging out...', { reason });\n\n  await destroyWalletProviders({ reason }, client);\n\n  if (client.user !== null) {\n    // Forward the logout reason so the backend can attribute the revocation in\n    // Datadog instead of it being inferred from downstream 401s.\n    const apiClient = createApiClient(\n      { headers: { [DYNAMIC_LOGOUT_REASON_HEADER]: reason } },\n      client\n    );\n\n    try {\n      await apiClient.revokeSession({\n        environmentId: core.environmentId,\n      });\n    } catch (error) {\n      core.logger.error('Failed to revoke session', error);\n    }\n\n    /**\n     * This deletes the auth cookie if it exists.\n     * If the cookie doesn't exist, this sets a new cookie that expires immediately.\n     */\n    if (isCookieEnabled(client)) {\n      // Match the Secure attribute used when the cookie was written so the\n      // deletion cookie is accepted consistently in a secure context.\n      const secureAttribute = getSecureCookieAttribute();\n\n      setCookie(\n        `${DYNAMIC_AUTH_COOKIE_NAME}=; Max-Age=-99999999; path=/; SameSite=Lax${secureAttribute}`\n      );\n    }\n  }\n\n  await core.keychain.removeKey('session');\n\n  const previousState = core.state.get();\n\n  core.state.set({\n    captchaToken: null,\n    elevatedAccessTokens: [],\n    legacyToken: null,\n    mfaToken: null,\n    sessionExpiresAt: null,\n    sessionKeys: null,\n    token: null,\n    unverifiedWalletAccounts: [],\n    user: null,\n  });\n\n  emitEvent({ args: { reason }, event: 'logout' }, client);\n  // core.state.set above has no subscribers of its own, so this is the only\n  // way listeners relying on getWalletAccounts() (e.g. chain extensions\n  // reconciling a wallet provider's registration) learn the accounts are\n  // gone. We diff against the pre-logout snapshot so this only fires when\n  // there actually were wallet accounts to lose.\n  checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);\n\n  // Refetch project settings\n  void fetchProjectSettings(client);\n\n  // Regenerate session keys\n  void generateSessionKeys(client);\n};\n"],"mappings":";;;;;AAUA,MAAa,0BACX,EAAE,qBACF,WACmB;CAGnB,MAAM,iBAFkB,mBAAmB,OAAO,CAEX,MACpC,qBAAmBA,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAI,2BAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO;;;;;;ACdT,MAAa,yCACX,EAAE,iBACF,WACsC;AACtC,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC;;;;;;;;;ACVH,IAAa,8BAAb,cAAiD,UAAU;CAEzD,YAAY,YAAoB;AAC9B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mDAAmD;GAClE,CAAC;;;;;;;ACMN,MAAa,cAAc,OAAU,EACnC,QAAQ,GACR,IACA,iBACsC;AACtC,MAAK,IAAI,QAAQ,GAAG,SAAS,YAAY,QACvC,KAAI;AACF,SAAO,MAAM,IAAI;UACV,OAAO;AACd,MAAI,SAAS,WACX,OAAM;AAGR,MAAI,QAAQ,EACV,OAAM,IAAI,SAAS,YAAY,WAAW,SAAS,MAAM,CAAC;;;;;;AAShE,OAAM,IAAI,4BAA4B,WAAW;;;;;ACtCnD,MAAa,gCAAgC,EAAE,OAAO;CACpD,SAAS,EAAE,QAAQ;CACnB,oBAAoB,EAAE,SACpB,EAAE,MACA,EAAE,OAAO;EACP,SAAS,EAAE,QAAQ;EACnB,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;EACjC,MAAM,EAAE,QAA2B,QAAQ,OAAO,QAAQ,SAAS;EACpE,CAAC,CACH,CACF;CACD,OAAO,EAAE,QAAe,QAAQ,OAAO,QAAQ,SAAS;CACxD,sBAAsB,EAAE,SACtB,EAAE,QAA8B,QAAQ,OAAO,QAAQ,SAAS,CACjE;CACD,IAAI,EAAE,QAAQ;CACd,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC;CACpC,mBAAmB,EAAE,QAAQ;CAC9B,CAAC;;;;ACtBF,MAAa,6BAA6B,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC;;;;ACM1E,MAAa,wBAAwB,uBAAuB;CAC1D,KAAK;CACL,QAAQ,EAAE,OAAO;EACf,YAAY,EAAE,QAAQ;EACtB,iBAAiB,EAAE,QAAgC;EACnD,0BAA0B,EAAE,MAAM,8BAA8B;EAChE,MAAM,EAAE,QAAqB;EAC7B,sBAAsB;EACvB,CAAC;CACH,CAAC;AAEF,MAAa,0BAA0B,uBAAuB;CAC5D,QAAQ,EAAE,aAAa,UAAU;CACjC,KAAK;CACL,QAAQ,EAAE,OAAO;EAIf,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC;EAKpC,sBAAsB,EAAE,MACtB,EAAE,OAAO;GAIP,WAAW,EAAE,QAAQ;GAIrB,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;GAI3B,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC;GAIlC,OAAO,EAAE,QAAQ;GAClB,CAAC,CACH;EAOD,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC;EAKnC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;EAKhC,mBAAmB,EAAE,QAAQ;EAK7B,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC;EAKnC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC9B,CAAC;CACH,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;AC/CF,MAAa,uBAAuB,OAClC,SAAS,kBAAkB,KACS;CACpC,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,YAAY,gBAAgB,EAAE,EAAE,OAAO;AAE7C,MAAK,OAAO,MAAM,sDAAsD;CAExE,MAAM,UAAU,YACd,UAAU,uBACR;EACE,eAAe,KAAK;EACpB,YAAY,GAAG,gBAAgB,GAAG,KAAK;EACxC,EACD,EACE,aAAa,QACd,CACF;CAEH,MAAM,kBAAkB,MAAM,YAAY;EACxC,IAAI;EACJ,YAAY;EACb,CAAC,CAAC,MAAM,OAAO,UAAU;EACxB,MAAM,cAAc,MAAM,KAAK,QAC5B,QAAQ,sBAAsB,CAC9B,YAAY,KAAK;AAEpB,MACE,aAAa,eAAe,wBAC5B,YAAY,iBACZ;AACA,QAAK,OAAO,MACV,4FACA,MACD;AAED,UAAO,YAAY;;AAGrB,OAAK,OAAO,MACV,gGACA,MACD;AAED,QAAM;GACN;AAEF,MAAK,MAAM,IAAI,EAAE,iBAAiB,mBAAmB,MAAM,CAAC;AAE5D,QAAO;;;;;;AC5ET,MAAa,sBAAsB,OACjC,WACyB;CACzB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,eAAe,KAAK,MAAM,KAAK;CAErC,MAAM,aAAa,QAAQ,aAAa,YAAY;CAEpD,MAAM,aAAa;EACjB,eAAe,KAAK;EACpB,WAAW,aAAa,WAAW;EACnC,QAAQ,aAAa,MAAM,MAAM;EAClC;AAED,MAAK,OAAO,KACV,aACI,kDACA,iDACJ,WACD;AAED,OAAM,KAAK,SAAS,UAAU,UAAU;CAExC,MAAM,YAAY,MAAM,KAAK,SAAS,YAAY,UAAU;AAE5D,eAAc,WAAW,uBAAuB;AAEhD,MAAK,MAAM,IAAI,EACb,aAAa,WACd,CAAC;AAEF,MAAK,OAAO,KACV,aACI,8CACA,6CACJ,WACD;AAED,QAAO,EAAE,WAAW;;;;;;ACtCtB,MAAa,iDACX,WACqB;CACrB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAMC,qCAAkD,IAAI,KAAK;AAIjE,CAFuB,kBAAkB,OAAO,CAEjC,SAAS,kBAAkB;AACxC,MAAI,mBAAmB,IAAI,cAAc,kBAAkB,CACzD;AAGF,MAAI;GACF,MAAM,iBAAiB,mCACrB,EACE,eACD,EACD,OACD;AAED,sBAAmB,IAAI,cAAc,mBAAmB,eAAe;WAChE,OAAO;AACd,QAAK,OAAO,MAAM,gDAAgD;IAChE;IACA,eAAe,cAAc;IAC9B,CAAC;;GAEJ;AAEF,QAAO,MAAM,KAAK,mBAAmB,QAAQ,CAAC;;;;;;;;;;;;;;ACxBhD,MAAa,yBAAyB,OACpC,EAAE,UACF,WACkB;CAClB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,kBAAkB,8CAA8C,OAAO;AAE7E,OAAM,QAAQ,IACZ,gBAAgB,IAAI,OAAO,mBAAmB;AAC5C,MAAI,CAAC,eAAe,QAAS;AAC7B,MAAI;AACF,SAAM,eAAe,QAAQ,EAAE,QAAQ,CAAC;WACjC,KAAK;AACZ,QAAK,OAAO,MACV,oCAAoC,eAAe,OACnD,IACD;;GAEH,CACH;;;;;;;;;;;;;;;;;;;;;;;ACCH,MAAE,mBAAQ,OACR,EAAC,UACD;CAEA,MAAK,OAAO,QAAQ,OAAA;AAEpB,MAAK,OAAC,MAAA,qCAA0C,EAAA,QAAA,CAAA;AAEhD,OAAI,uBAAsB,EAAA,QAAA,EAAA,OAAA;AAE1B,KAAI,OAAC,SAAe,MAAM;EAGxB,MAAE,YAAA,gBACD,EAAA,SAAA,GAAA,+BAAA,QAAA,EAAA,SAED;AAEA,MAAI;AACF,SAAE,UAAA,cAAA,EACF,eAAc,KAAA,eACd,CAAA;WACF,OAAA;;;;;;;AAQA,MAAI,gBAAgB,OAAI,CAKtB,WACF,GAAA,yBAAA,4CAHW,0BAAA,GAIb;;AAIA,OAAM,KAAA,SAAc,UAAO,UAAW;CAEtC,MAAK,gBAAU,KAAA,MAAA,KAAA;AAEf,MAAE,MAAA,IAAA;EACA,cAAa;EACb,sBAAc,EAAA;EACd,aAAA;EACA,UAAA;EACA,kBAAW;EACX,aAAA;EACA,OAAM;EACN,0BAAA,EAAA;;EAEF,CAAA;AAEA,WAAO;EAAA,MAAU,EAAA,QAAW;EAAA,OAAA;EAAmB,EAAE,OAAK;AAMtD,yCAAmB,EAAA,eAAA,EAAA,OAAA;AAGnB,CAAG,qBAAmB,OAAA"}

package/dist/{migrateFromFireblocks-B0pkwAaK.native.esm.js → migrateFromFireblocks-BwYnNAAh.native.esm.js}

@@ -1,4 +1,4 @@
-import { E as getWalletProviders, S as isWaasWalletProvider, T as DYNAMIC_WAAS_METADATA, bt as getDefaultClient, ht as assertDefined, i as __refreshAuth_wrapped, n as NoWalletProviderFoundError, t as getWalletProviderFromWalletAccount, wt as BaseError } from "./apiClient-B0eCQXEJ.native.esm.js";
+import { E as getWalletProviders, S as isWaasWalletProvider, T as DYNAMIC_WAAS_METADATA, bt as getDefaultClient, ht as assertDefined, i as __refreshAuth_wrapped, n as NoWalletProviderFoundError, t as getWalletProviderFromWalletAccount, wt as BaseError } from "./apiClient-CpfEx6Uc.native.esm.js";
 import { EmbeddedWalletVersionEnum } from "@dynamic-labs/sdk-api-core";
 
 //#region src/errors/NotWaasWalletProviderError.ts
@@ -125,4 +125,4 @@ const migrateFromFireblocks = async ({ coinTypes, deviceId, expectedAddresses, j
 
 //#endregion
 export { TransactionBroadcastError as a, NotWaasWalletAccountError as i, isDynamicWaasEnabled as n, NotWaasWalletProviderError as o, getWaasWalletProviderFromWalletAccount as r, migrateFromFireblocks as t };
-//# sourceMappingURL=migrateFromFireblocks-B0pkwAaK.native.esm.js.map
+//# sourceMappingURL=migrateFromFireblocks-BwYnNAAh.native.esm.js.map

package/dist/{migrateFromFireblocks-B0pkwAaK.native.esm.js.map → migrateFromFireblocks-BwYnNAAh.native.esm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"migrateFromFireblocks-B0pkwAaK.native.esm.js","names":["refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/errors/TransactionBroadcastError.ts","../src/errors/NotWaasWalletAccountError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Error codes that identify why a v3 WaaS transaction broadcast was rejected.\n *\n * @example 'BROADCAST_REJECTED'\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastErrorCode =\n  | 'BROADCAST_IDEMPOTENCY_CONFLICT'\n  | 'BROADCAST_OUTCOME_UNKNOWN'\n  | 'BROADCAST_RATE_LIMITED'\n  | 'BROADCAST_REJECTED'\n  | 'BROADCAST_REQUIRES_RESIGN'\n  | 'BROADCAST_WALLET_INELIGIBLE'\n  | 'INVALID_SIGNED_TRANSACTION'\n  | 'NETWORK_NOT_ENABLED'\n  | 'SIGNED_TRANSACTION_WALLET_MISMATCH'\n  | 'UNSUPPORTED_WAAS_CHAIN';\n\n/**\n * States describing whether the signed transaction reached the chain.\n *\n * @example 'not_submitted'\n * @see TransactionBroadcastError\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastSubmissionState =\n  | 'not_submitted'\n  | 'requires_resign'\n  | 'unknown';\n\ntype TransactionBroadcastErrorParams = {\n  attempts: number;\n  broadcastId: string;\n  cause: Error;\n  code: TransactionBroadcastErrorCode;\n  message: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId?: string;\n};\n\n/**\n * Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.\n *\n * @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport class TransactionBroadcastError extends BaseError {\n  attempts: number;\n  broadcastId: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId: string | undefined;\n\n  constructor({\n    attempts,\n    broadcastId,\n    cause,\n    code,\n    message,\n    retryable,\n    submissionState,\n    transactionId,\n  }: TransactionBroadcastErrorParams) {\n    super({\n      cause,\n      code,\n      docsUrl: null,\n      name: 'TransactionBroadcastError',\n      shortMessage: message,\n    });\n\n    this.attempts = attempts;\n    this.broadcastId = broadcastId;\n    this.retryable = retryable;\n    this.submissionState = submissionState;\n    this.transactionId = transactionId;\n  }\n}\n","import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import { EmbeddedWalletVersionEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.\n *\n * This function examines the project settings to determine if Dynamic WaaS is\n * enabled in the Dynamic Dashboard or not.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if Dynamic WaaS is enabled, false otherwise.\n * @notInstrumented\n */\nexport const isDynamicWaasEnabled = (client = getDefaultClient()): boolean => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  const embeddedWalletSettings = projectSettings.sdk.embeddedWallets;\n\n  const dynamicWaasIsEnabled =\n    embeddedWalletSettings?.defaultWalletVersion ===\n    EmbeddedWalletVersionEnum.V3;\n\n  return dynamicWaasIsEnabled;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgD,UAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;;;;;;;ACqCN,IAAa,4BAAb,cAA+C,UAAU;CACvD;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,UACA,aACA,OACA,MACA,SACA,WACA,iBACA,iBACkC;AAClC,QAAM;GACJ;GACA;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,YAAY;AACjB,OAAK,kBAAkB;AACvB,OAAK,gBAAgB;;;;;;AC1EzB,IAAa,4BAAb,cAA+C,UAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAAC,qBAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;ACZT,MAAa,wBAAwB,SAAS,kBAAkB,KAAc;CAC5E,MAAM,kBAAkB,OAAO;AAE/B,eAAc,iBAAiB,qCAAqC;AAQpE,QAN+B,gBAAgB,IAAI,iBAGzB,yBACxB,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;ACmC9B,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAAS,kBAAkB,KACgB;CAC3C,MAAM,YAAY,mBAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,sBAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAK,qBAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMA,sBAAY,OAAO;AAEzB,QAAO"}
+{"version":3,"file":"migrateFromFireblocks-BwYnNAAh.native.esm.js","names":["refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/errors/TransactionBroadcastError.ts","../src/errors/NotWaasWalletAccountError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Error codes that identify why a v3 WaaS transaction broadcast was rejected.\n *\n * @example 'BROADCAST_REJECTED'\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastErrorCode =\n  | 'BROADCAST_IDEMPOTENCY_CONFLICT'\n  | 'BROADCAST_OUTCOME_UNKNOWN'\n  | 'BROADCAST_RATE_LIMITED'\n  | 'BROADCAST_REJECTED'\n  | 'BROADCAST_REQUIRES_RESIGN'\n  | 'BROADCAST_WALLET_INELIGIBLE'\n  | 'INVALID_SIGNED_TRANSACTION'\n  | 'NETWORK_NOT_ENABLED'\n  | 'SIGNED_TRANSACTION_WALLET_MISMATCH'\n  | 'UNSUPPORTED_WAAS_CHAIN';\n\n/**\n * States describing whether the signed transaction reached the chain.\n *\n * @example 'not_submitted'\n * @see TransactionBroadcastError\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastSubmissionState =\n  | 'not_submitted'\n  | 'requires_resign'\n  | 'unknown';\n\ntype TransactionBroadcastErrorParams = {\n  attempts: number;\n  broadcastId: string;\n  cause: Error;\n  code: TransactionBroadcastErrorCode;\n  message: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId?: string;\n};\n\n/**\n * Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.\n *\n * @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport class TransactionBroadcastError extends BaseError {\n  attempts: number;\n  broadcastId: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId: string | undefined;\n\n  constructor({\n    attempts,\n    broadcastId,\n    cause,\n    code,\n    message,\n    retryable,\n    submissionState,\n    transactionId,\n  }: TransactionBroadcastErrorParams) {\n    super({\n      cause,\n      code,\n      docsUrl: null,\n      name: 'TransactionBroadcastError',\n      shortMessage: message,\n    });\n\n    this.attempts = attempts;\n    this.broadcastId = broadcastId;\n    this.retryable = retryable;\n    this.submissionState = submissionState;\n    this.transactionId = transactionId;\n  }\n}\n","import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import { EmbeddedWalletVersionEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.\n *\n * This function examines the project settings to determine if Dynamic WaaS is\n * enabled in the Dynamic Dashboard or not.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if Dynamic WaaS is enabled, false otherwise.\n * @notInstrumented\n */\nexport const isDynamicWaasEnabled = (client = getDefaultClient()): boolean => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  const embeddedWalletSettings = projectSettings.sdk.embeddedWallets;\n\n  const dynamicWaasIsEnabled =\n    embeddedWalletSettings?.defaultWalletVersion ===\n    EmbeddedWalletVersionEnum.V3;\n\n  return dynamicWaasIsEnabled;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgD,UAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;;;;;;;ACqCN,IAAa,4BAAb,cAA+C,UAAU;CACvD;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,UACA,aACA,OACA,MACA,SACA,WACA,iBACA,iBACkC;AAClC,QAAM;GACJ;GACA;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,YAAY;AACjB,OAAK,kBAAkB;AACvB,OAAK,gBAAgB;;;;;;AC1EzB,IAAa,4BAAb,cAA+C,UAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAAC,qBAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;ACZT,MAAa,wBAAwB,SAAS,kBAAkB,KAAc;CAC5E,MAAM,kBAAkB,OAAO;AAE/B,eAAc,iBAAiB,qCAAqC;AAQpE,QAN+B,gBAAgB,IAAI,iBAGzB,yBACxB,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;ACmC9B,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAAS,kBAAkB,KACgB;CAC3C,MAAM,YAAY,mBAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,sBAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAK,qBAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMA,sBAAY,OAAO;AAEzB,QAAO"}

package/dist/{migrateFromFireblocks-B76sFd7a.esm.js → migrateFromFireblocks-C_cap--b.esm.js}

@@ -1,4 +1,4 @@
-import { Et as BaseError, M as getWalletProviders, O as isWaasWalletProvider, St as getDefaultClient, _t as assertDefined, c as NoWalletProviderFoundError, j as DYNAMIC_WAAS_METADATA, s as getWalletProviderFromWalletAccount, u as __refreshAuth_wrapped } from "./logoutWithReason-B-cf-dUs.esm.js";
+import { Et as BaseError, M as getWalletProviders, O as isWaasWalletProvider, St as getDefaultClient, _t as assertDefined, c as NoWalletProviderFoundError, j as DYNAMIC_WAAS_METADATA, s as getWalletProviderFromWalletAccount, u as __refreshAuth_wrapped } from "./logoutWithReason-DO0kP7nf.esm.js";
 import { EmbeddedWalletVersionEnum } from "@dynamic-labs/sdk-api-core";
 
 //#region src/errors/NotWaasWalletProviderError.ts
@@ -125,4 +125,4 @@ const migrateFromFireblocks = async ({ coinTypes, deviceId, expectedAddresses, j
 
 //#endregion
 export { TransactionBroadcastError as a, NotWaasWalletAccountError as i, isDynamicWaasEnabled as n, NotWaasWalletProviderError as o, getWaasWalletProviderFromWalletAccount as r, migrateFromFireblocks as t };
-//# sourceMappingURL=migrateFromFireblocks-B76sFd7a.esm.js.map
+//# sourceMappingURL=migrateFromFireblocks-C_cap--b.esm.js.map

package/dist/{migrateFromFireblocks-B76sFd7a.esm.js.map → migrateFromFireblocks-C_cap--b.esm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"migrateFromFireblocks-B76sFd7a.esm.js","names":["refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/errors/TransactionBroadcastError.ts","../src/errors/NotWaasWalletAccountError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Error codes that identify why a v3 WaaS transaction broadcast was rejected.\n *\n * @example 'BROADCAST_REJECTED'\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastErrorCode =\n  | 'BROADCAST_IDEMPOTENCY_CONFLICT'\n  | 'BROADCAST_OUTCOME_UNKNOWN'\n  | 'BROADCAST_RATE_LIMITED'\n  | 'BROADCAST_REJECTED'\n  | 'BROADCAST_REQUIRES_RESIGN'\n  | 'BROADCAST_WALLET_INELIGIBLE'\n  | 'INVALID_SIGNED_TRANSACTION'\n  | 'NETWORK_NOT_ENABLED'\n  | 'SIGNED_TRANSACTION_WALLET_MISMATCH'\n  | 'UNSUPPORTED_WAAS_CHAIN';\n\n/**\n * States describing whether the signed transaction reached the chain.\n *\n * @example 'not_submitted'\n * @see TransactionBroadcastError\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastSubmissionState =\n  | 'not_submitted'\n  | 'requires_resign'\n  | 'unknown';\n\ntype TransactionBroadcastErrorParams = {\n  attempts: number;\n  broadcastId: string;\n  cause: Error;\n  code: TransactionBroadcastErrorCode;\n  message: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId?: string;\n};\n\n/**\n * Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.\n *\n * @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport class TransactionBroadcastError extends BaseError {\n  attempts: number;\n  broadcastId: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId: string | undefined;\n\n  constructor({\n    attempts,\n    broadcastId,\n    cause,\n    code,\n    message,\n    retryable,\n    submissionState,\n    transactionId,\n  }: TransactionBroadcastErrorParams) {\n    super({\n      cause,\n      code,\n      docsUrl: null,\n      name: 'TransactionBroadcastError',\n      shortMessage: message,\n    });\n\n    this.attempts = attempts;\n    this.broadcastId = broadcastId;\n    this.retryable = retryable;\n    this.submissionState = submissionState;\n    this.transactionId = transactionId;\n  }\n}\n","import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import { EmbeddedWalletVersionEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.\n *\n * This function examines the project settings to determine if Dynamic WaaS is\n * enabled in the Dynamic Dashboard or not.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if Dynamic WaaS is enabled, false otherwise.\n * @notInstrumented\n */\nexport const isDynamicWaasEnabled = (client = getDefaultClient()): boolean => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  const embeddedWalletSettings = projectSettings.sdk.embeddedWallets;\n\n  const dynamicWaasIsEnabled =\n    embeddedWalletSettings?.defaultWalletVersion ===\n    EmbeddedWalletVersionEnum.V3;\n\n  return dynamicWaasIsEnabled;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgD,UAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;;;;;;;ACqCN,IAAa,4BAAb,cAA+C,UAAU;CACvD;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,UACA,aACA,OACA,MACA,SACA,WACA,iBACA,iBACkC;AAClC,QAAM;GACJ;GACA;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,YAAY;AACjB,OAAK,kBAAkB;AACvB,OAAK,gBAAgB;;;;;;AC1EzB,IAAa,4BAAb,cAA+C,UAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAAC,qBAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;ACZT,MAAa,wBAAwB,SAAS,kBAAkB,KAAc;CAC5E,MAAM,kBAAkB,OAAO;AAE/B,eAAc,iBAAiB,qCAAqC;AAQpE,QAN+B,gBAAgB,IAAI,iBAGzB,yBACxB,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;ACmC9B,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAAS,kBAAkB,KACgB;CAC3C,MAAM,YAAY,mBAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,sBAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAK,qBAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMA,sBAAY,OAAO;AAEzB,QAAO"}
+{"version":3,"file":"migrateFromFireblocks-C_cap--b.esm.js","names":["refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/errors/TransactionBroadcastError.ts","../src/errors/NotWaasWalletAccountError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Error codes that identify why a v3 WaaS transaction broadcast was rejected.\n *\n * @example 'BROADCAST_REJECTED'\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastErrorCode =\n  | 'BROADCAST_IDEMPOTENCY_CONFLICT'\n  | 'BROADCAST_OUTCOME_UNKNOWN'\n  | 'BROADCAST_RATE_LIMITED'\n  | 'BROADCAST_REJECTED'\n  | 'BROADCAST_REQUIRES_RESIGN'\n  | 'BROADCAST_WALLET_INELIGIBLE'\n  | 'INVALID_SIGNED_TRANSACTION'\n  | 'NETWORK_NOT_ENABLED'\n  | 'SIGNED_TRANSACTION_WALLET_MISMATCH'\n  | 'UNSUPPORTED_WAAS_CHAIN';\n\n/**\n * States describing whether the signed transaction reached the chain.\n *\n * @example 'not_submitted'\n * @see TransactionBroadcastError\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastSubmissionState =\n  | 'not_submitted'\n  | 'requires_resign'\n  | 'unknown';\n\ntype TransactionBroadcastErrorParams = {\n  attempts: number;\n  broadcastId: string;\n  cause: Error;\n  code: TransactionBroadcastErrorCode;\n  message: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId?: string;\n};\n\n/**\n * Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.\n *\n * @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport class TransactionBroadcastError extends BaseError {\n  attempts: number;\n  broadcastId: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId: string | undefined;\n\n  constructor({\n    attempts,\n    broadcastId,\n    cause,\n    code,\n    message,\n    retryable,\n    submissionState,\n    transactionId,\n  }: TransactionBroadcastErrorParams) {\n    super({\n      cause,\n      code,\n      docsUrl: null,\n      name: 'TransactionBroadcastError',\n      shortMessage: message,\n    });\n\n    this.attempts = attempts;\n    this.broadcastId = broadcastId;\n    this.retryable = retryable;\n    this.submissionState = submissionState;\n    this.transactionId = transactionId;\n  }\n}\n","import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import { EmbeddedWalletVersionEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.\n *\n * This function examines the project settings to determine if Dynamic WaaS is\n * enabled in the Dynamic Dashboard or not.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if Dynamic WaaS is enabled, false otherwise.\n * @notInstrumented\n */\nexport const isDynamicWaasEnabled = (client = getDefaultClient()): boolean => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  const embeddedWalletSettings = projectSettings.sdk.embeddedWallets;\n\n  const dynamicWaasIsEnabled =\n    embeddedWalletSettings?.defaultWalletVersion ===\n    EmbeddedWalletVersionEnum.V3;\n\n  return dynamicWaasIsEnabled;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgD,UAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;;;;;;;ACqCN,IAAa,4BAAb,cAA+C,UAAU;CACvD;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,UACA,aACA,OACA,MACA,SACA,WACA,iBACA,iBACkC;AAClC,QAAM;GACJ;GACA;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,YAAY;AACjB,OAAK,kBAAkB;AACvB,OAAK,gBAAgB;;;;;;AC1EzB,IAAa,4BAAb,cAA+C,UAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAAC,qBAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;ACZT,MAAa,wBAAwB,SAAS,kBAAkB,KAAc;CAC5E,MAAM,kBAAkB,OAAO;AAE/B,eAAc,iBAAiB,qCAAqC;AAQpE,QAN+B,gBAAgB,IAAI,iBAGzB,yBACxB,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;ACmC9B,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAAS,kBAAkB,KACgB;CAC3C,MAAM,YAAY,mBAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,sBAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAK,qBAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMA,sBAAY,OAAO;AAEzB,QAAO"}

package/dist/{migrateFromFireblocks-RCqy2qOG.cjs → migrateFromFireblocks-ycJIYcrm.cjs}

@@ -1,4 +1,4 @@
-const require_logoutWithReason = require('./logoutWithReason-c1DmyRBx.cjs');
+const require_logoutWithReason = require('./logoutWithReason-BKwWBsCT.cjs');
 let _dynamic_labs_sdk_api_core = require("@dynamic-labs/sdk-api-core");
 
 //#region src/errors/NotWaasWalletProviderError.ts
@@ -160,4 +160,4 @@ Object.defineProperty(exports, 'migrateFromFireblocks', {
     return migrateFromFireblocks;
   }
 });
-//# sourceMappingURL=migrateFromFireblocks-RCqy2qOG.cjs.map
+//# sourceMappingURL=migrateFromFireblocks-ycJIYcrm.cjs.map

package/dist/{migrateFromFireblocks-RCqy2qOG.cjs.map → migrateFromFireblocks-ycJIYcrm.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"migrateFromFireblocks-RCqy2qOG.cjs","names":["BaseError","BaseError","BaseError","getWalletProviderFromWalletAccount","isWaasWalletProvider","getDefaultClient","EmbeddedWalletVersionEnum","getDefaultClient","getWalletProviders","NoWalletProviderFoundError","DYNAMIC_WAAS_METADATA","isWaasWalletProvider","refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/errors/TransactionBroadcastError.ts","../src/errors/NotWaasWalletAccountError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Error codes that identify why a v3 WaaS transaction broadcast was rejected.\n *\n * @example 'BROADCAST_REJECTED'\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastErrorCode =\n  | 'BROADCAST_IDEMPOTENCY_CONFLICT'\n  | 'BROADCAST_OUTCOME_UNKNOWN'\n  | 'BROADCAST_RATE_LIMITED'\n  | 'BROADCAST_REJECTED'\n  | 'BROADCAST_REQUIRES_RESIGN'\n  | 'BROADCAST_WALLET_INELIGIBLE'\n  | 'INVALID_SIGNED_TRANSACTION'\n  | 'NETWORK_NOT_ENABLED'\n  | 'SIGNED_TRANSACTION_WALLET_MISMATCH'\n  | 'UNSUPPORTED_WAAS_CHAIN';\n\n/**\n * States describing whether the signed transaction reached the chain.\n *\n * @example 'not_submitted'\n * @see TransactionBroadcastError\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastSubmissionState =\n  | 'not_submitted'\n  | 'requires_resign'\n  | 'unknown';\n\ntype TransactionBroadcastErrorParams = {\n  attempts: number;\n  broadcastId: string;\n  cause: Error;\n  code: TransactionBroadcastErrorCode;\n  message: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId?: string;\n};\n\n/**\n * Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.\n *\n * @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport class TransactionBroadcastError extends BaseError {\n  attempts: number;\n  broadcastId: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId: string | undefined;\n\n  constructor({\n    attempts,\n    broadcastId,\n    cause,\n    code,\n    message,\n    retryable,\n    submissionState,\n    transactionId,\n  }: TransactionBroadcastErrorParams) {\n    super({\n      cause,\n      code,\n      docsUrl: null,\n      name: 'TransactionBroadcastError',\n      shortMessage: message,\n    });\n\n    this.attempts = attempts;\n    this.broadcastId = broadcastId;\n    this.retryable = retryable;\n    this.submissionState = submissionState;\n    this.transactionId = transactionId;\n  }\n}\n","import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import { EmbeddedWalletVersionEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.\n *\n * This function examines the project settings to determine if Dynamic WaaS is\n * enabled in the Dynamic Dashboard or not.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if Dynamic WaaS is enabled, false otherwise.\n * @notInstrumented\n */\nexport const isDynamicWaasEnabled = (client = getDefaultClient()): boolean => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  const embeddedWalletSettings = projectSettings.sdk.embeddedWallets;\n\n  const dynamicWaasIsEnabled =\n    embeddedWalletSettings?.defaultWalletVersion ===\n    EmbeddedWalletVersionEnum.V3;\n\n  return dynamicWaasIsEnabled;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgDA,mCAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;;;;;;;ACqCN,IAAa,4BAAb,cAA+CC,mCAAU;CACvD;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,UACA,aACA,OACA,MACA,SACA,WACA,iBACA,iBACkC;AAClC,QAAM;GACJ;GACA;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,YAAY;AACjB,OAAK,kBAAkB;AACvB,OAAK,gBAAgB;;;;;;AC1EzB,IAAa,4BAAb,cAA+CC,mCAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiBC,4DACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAACC,8CAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;ACZT,MAAa,wBAAwB,SAASC,2CAAkB,KAAc;CAC5E,MAAM,kBAAkB,OAAO;AAE/B,wCAAc,iBAAiB,qCAAqC;AAQpE,QAN+B,gBAAgB,IAAI,iBAGzB,yBACxBC,qDAA0B;;;;;;;;;;;;;;;;;;;;;;;ACmC9B,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAASC,2CAAkB,KACgB;CAC3C,MAAM,YAAYC,4CAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAIC,oDAA2B,EACnC,mBAAmBC,+CAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAKC,8CAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMC,+CAAY,OAAO;AAEzB,QAAO"}
+{"version":3,"file":"migrateFromFireblocks-ycJIYcrm.cjs","names":["BaseError","BaseError","BaseError","getWalletProviderFromWalletAccount","isWaasWalletProvider","getDefaultClient","EmbeddedWalletVersionEnum","getDefaultClient","getWalletProviders","NoWalletProviderFoundError","DYNAMIC_WAAS_METADATA","isWaasWalletProvider","refreshAuth"],"sources":["../src/errors/NotWaasWalletProviderError.ts","../src/errors/TransactionBroadcastError.ts","../src/errors/NotWaasWalletAccountError.ts","../src/modules/waas/getWaasWalletProviderFromWalletAccount/getWaasWalletProviderFromWalletAccount.ts","../src/modules/waas/isDynamicWaasEnabled/isDynamicWaasEnabled.ts","../src/modules/waas/migrateFromFireblocks/migrateFromFireblocks.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletProviderErrorParams = {\n  walletProviderKey: string;\n};\n\nexport class NotWaasWalletProviderError extends BaseError {\n  constructor({ walletProviderKey }: NotWaasWalletProviderErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_provider_error',\n      docsUrl: null,\n      name: 'NotWaasWalletProviderError',\n      shortMessage: `Wallet provider ${walletProviderKey} is not a Dynamic WaaS wallet provider`,\n    });\n  }\n}\n","import { BaseError } from './base';\n\n/**\n * Error codes that identify why a v3 WaaS transaction broadcast was rejected.\n *\n * @example 'BROADCAST_REJECTED'\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastErrorCode =\n  | 'BROADCAST_IDEMPOTENCY_CONFLICT'\n  | 'BROADCAST_OUTCOME_UNKNOWN'\n  | 'BROADCAST_RATE_LIMITED'\n  | 'BROADCAST_REJECTED'\n  | 'BROADCAST_REQUIRES_RESIGN'\n  | 'BROADCAST_WALLET_INELIGIBLE'\n  | 'INVALID_SIGNED_TRANSACTION'\n  | 'NETWORK_NOT_ENABLED'\n  | 'SIGNED_TRANSACTION_WALLET_MISMATCH'\n  | 'UNSUPPORTED_WAAS_CHAIN';\n\n/**\n * States describing whether the signed transaction reached the chain.\n *\n * @example 'not_submitted'\n * @see TransactionBroadcastError\n * @see broadcastWaasTransaction\n */\nexport type TransactionBroadcastSubmissionState =\n  | 'not_submitted'\n  | 'requires_resign'\n  | 'unknown';\n\ntype TransactionBroadcastErrorParams = {\n  attempts: number;\n  broadcastId: string;\n  cause: Error;\n  code: TransactionBroadcastErrorCode;\n  message: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId?: string;\n};\n\n/**\n * Error raised when Redcoast fails to submit a v3 WaaS transaction after the SDK signed it.\n *\n * @example new TransactionBroadcastError({ attempts: 1, broadcastId: 'broadcast-id', cause, code: 'BROADCAST_REJECTED', message: 'rejected', retryable: false, submissionState: 'not_submitted', transactionId: undefined })\n * @see transactionBroadcastErrorMapper\n * @see broadcastWaasTransaction\n */\nexport class TransactionBroadcastError extends BaseError {\n  attempts: number;\n  broadcastId: string;\n  retryable: boolean;\n  submissionState: TransactionBroadcastSubmissionState;\n  transactionId: string | undefined;\n\n  constructor({\n    attempts,\n    broadcastId,\n    cause,\n    code,\n    message,\n    retryable,\n    submissionState,\n    transactionId,\n  }: TransactionBroadcastErrorParams) {\n    super({\n      cause,\n      code,\n      docsUrl: null,\n      name: 'TransactionBroadcastError',\n      shortMessage: message,\n    });\n\n    this.attempts = attempts;\n    this.broadcastId = broadcastId;\n    this.retryable = retryable;\n    this.submissionState = submissionState;\n    this.transactionId = transactionId;\n  }\n}\n","import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n","import type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { NotWaasWalletAccountError } from '../../../errors/NotWaasWalletAccountError';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype GetWalletProviderFromWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @notInstrumented */\nexport const getWaasWalletProviderFromWalletAccount = (\n  { walletAccount }: GetWalletProviderFromWalletAccountParams,\n  client: DynamicClient\n): WaasWalletProvider => {\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  if (!isWaasWalletProvider(walletProvider)) {\n    throw new NotWaasWalletAccountError({\n      walletAddress: walletAccount.address,\n    });\n  }\n\n  return walletProvider;\n};\n","import { EmbeddedWalletVersionEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if Dynamic WaaS (Wallet as a Service) is enabled for the current project.\n *\n * This function examines the project settings to determine if Dynamic WaaS is\n * enabled in the Dynamic Dashboard or not.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if Dynamic WaaS is enabled, false otherwise.\n * @notInstrumented\n */\nexport const isDynamicWaasEnabled = (client = getDefaultClient()): boolean => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  const embeddedWalletSettings = projectSettings.sdk.embeddedWallets;\n\n  const dynamicWaasIsEnabled =\n    embeddedWalletSettings?.defaultWalletVersion ===\n    EmbeddedWalletVersionEnum.V3;\n\n  return dynamicWaasIsEnabled;\n};\n","import type { MigrateFromFireblocksResponse } from '@dynamic-labs-wallet/browser-wallet-client';\n\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { NotWaasWalletProviderError } from '../../../errors/NotWaasWalletProviderError';\nimport { refreshAuth } from '../../user/refreshAuth';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\n\ntype MigrateFromFireblocksParams = {\n  /**\n   * Optional SLIP-0044 coin types per chain name for BIP44 derivation off the\n   * Fireblocks takeover xprv (e.g. `{ EVM: 1 }` for Sepolia).\n   */\n  coinTypes?: Record<string, number>;\n  /**\n   * The Fireblocks NCW device id whose key material is being migrated.\n   */\n  deviceId: string;\n  /**\n   * Required per-chain expected wallet address (the address Fireblocks held). Its\n   * keys are the chains migration runs on, and the migration iframe verifies each\n   * imported Dynamic address matches the value, so a wrong derivation fails loudly\n   * instead of producing an unusable wallet.\n   */\n  expectedAddresses: Record<string, string>;\n  /**\n   * The Fireblocks-issued JWT authorizing the takeover.\n   */\n  jwt: string;\n  /**\n   * The password that encrypted the legacy Fireblocks NCW device storage.\n   */\n  password: string;\n  /**\n   * The serialized Fireblocks NCW device storage (the local key share backup).\n   */\n  storage: Record<string, string>;\n};\n\n/**\n * Migrates an existing Fireblocks NCW wallet into Dynamic's WaaS infrastructure.\n *\n * Migration is a single cross-chain operation: one call takes over the Fireblocks\n * key material and provisions Dynamic WaaS wallet accounts for every supported\n * chain. Because it is not per-chain, this resolves a single WaaS wallet provider\n * (any registered chain) and delegates the takeover to it.\n *\n * @param params.deviceId - The Fireblocks NCW device id being migrated.\n * @param params.jwt - The Fireblocks-issued JWT authorizing the takeover.\n * @param params.storage - The serialized Fireblocks NCW device storage.\n * @param params.password - The password that encrypted the legacy device storage.\n * @param params.expectedAddresses - Required per-chain expected address; its keys are the chains migration runs on, and each imported address is verified against it.\n * @param [params.coinTypes] - Optional SLIP-0044 coin types per chain name.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise resolving to the per-chain migration results.\n * @notInstrumented\n */\nexport const migrateFromFireblocks = async (\n  {\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  }: MigrateFromFireblocksParams,\n  client = getDefaultClient()\n): Promise<MigrateFromFireblocksResponse> => {\n  const providers = getWalletProviders(client);\n\n  if (providers.length === 0) {\n    throw new NoWalletProviderFoundError({\n      walletProviderKey: DYNAMIC_WAAS_METADATA.displayName,\n    });\n  }\n\n  // Migration is cross-chain, so any registered WaaS provider can drive the\n  // takeover. Resolve the first one rather than iterating per chain.\n  const waasProvider = providers.find(isWaasWalletProvider);\n\n  if (!waasProvider) {\n    throw new NotWaasWalletProviderError({\n      walletProviderKey: providers[0].key,\n    });\n  }\n\n  const result = await waasProvider.migrateFromFireblocks({\n    coinTypes,\n    deviceId,\n    expectedAddresses,\n    jwt,\n    password,\n    storage,\n  });\n\n  await refreshAuth(client);\n\n  return result;\n};\n"],"mappings":";;;;AAMA,IAAa,6BAAb,cAAgDA,mCAAU;CACxD,YAAY,EAAE,qBAAuD;AACnE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mBAAmB,kBAAkB;GACpD,CAAC;;;;;;;;;;;;;ACqCN,IAAa,4BAAb,cAA+CC,mCAAU;CACvD;CACA;CACA;CACA;CACA;CAEA,YAAY,EACV,UACA,aACA,OACA,MACA,SACA,WACA,iBACA,iBACkC;AAClC,QAAM;GACJ;GACA;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,WAAW;AAChB,OAAK,cAAc;AACnB,OAAK,YAAY;AACjB,OAAK,kBAAkB;AACvB,OAAK,gBAAgB;;;;;;AC1EzB,IAAa,4BAAb,cAA+CC,mCAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC;;;;;;;ACFN,MAAa,0CACX,EAAE,iBACF,WACuB;CACvB,MAAM,iBAAiBC,4DACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI,CAACC,8CAAqB,eAAe,CACvC,OAAM,IAAI,0BAA0B,EAClC,eAAe,cAAc,SAC9B,CAAC;AAGJ,QAAO;;;;;;;;;;;;;;;ACZT,MAAa,wBAAwB,SAASC,2CAAkB,KAAc;CAC5E,MAAM,kBAAkB,OAAO;AAE/B,wCAAc,iBAAiB,qCAAqC;AAQpE,QAN+B,gBAAgB,IAAI,iBAGzB,yBACxBC,qDAA0B;;;;;;;;;;;;;;;;;;;;;;;ACmC9B,MAAa,wBAAwB,OACnC,EACE,WACA,UACA,mBACA,KACA,UACA,WAEF,SAASC,2CAAkB,KACgB;CAC3C,MAAM,YAAYC,4CAAmB,OAAO;AAE5C,KAAI,UAAU,WAAW,EACvB,OAAM,IAAIC,oDAA2B,EACnC,mBAAmBC,+CAAsB,aAC1C,CAAC;CAKJ,MAAM,eAAe,UAAU,KAAKC,8CAAqB;AAEzD,KAAI,CAAC,aACH,OAAM,IAAI,2BAA2B,EACnC,mBAAmB,UAAU,GAAG,KACjC,CAAC;CAGJ,MAAM,SAAS,MAAM,aAAa,sBAAsB;EACtD;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,OAAMC,+CAAY,OAAO;AAEzB,QAAO"}

package/dist/modules/sessionKeys/canonicalizeJson/canonicalizeJson.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Deterministic canonical JSON: codepoint-sorted keys at every depth, arrays
+ * in order, `undefined` fields removed, no whitespace. Byte-identical to
+ * auth-service's `enclave/canonical-json`, which the enclave re-canonicalizes
+ * against when verifying signatures.
+ *
+ * @param obj - The document to canonicalize.
+ * @returns The canonical JSON string.
+ *
+ * @example
+ * ```typescript
+ * canonicalizeJson({ b: 1, a: 2 }); // '{"a":2,"b":1}'
+ * ```
+ *
+ * @see {@link signBusinessAccountIntent} for the signature flow that depends on this byte sequence.
+ * @see {@link signBusinessAccountApproval} for the co-signer flow using the same canonical form.
+ * @notInstrumented
+ */
+export declare const canonicalizeJson: (obj: Record<string, unknown>) => string;
+//# sourceMappingURL=canonicalizeJson.d.ts.map

package/dist/modules/sessionKeys/canonicalizeJson/canonicalizeJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalizeJson.d.ts","sourceRoot":"","sources":["../../../../src/modules/sessionKeys/canonicalizeJson/canonicalizeJson.ts"],"names":[],"mappings":"AA0CA;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,gBAAgB,QAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAC9B,CAAC"}

package/dist/modules/sessionKeys/canonicalizeJson/index.d.ts

@@ -0,0 +1,2 @@
+export { canonicalizeJson } from './canonicalizeJson';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/sessionKeys/canonicalizeJson/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/sessionKeys/canonicalizeJson/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/modules/sessionKeys/signBusinessAccountIntent/signBusinessAccountIntent.d.ts

@@ -8,6 +8,17 @@ import type { DynamicClient } from '../../../client/types';
  * There is deliberately no `expiresAt`. How long an intent stays redeemable is
  * the account's governance to decide, measured from `createdAt` — an
  * initiator-chosen expiry would be an initiator-chosen authorization lifetime.
+ *
+ * @example
+ * ```ts
+ * const result = await addBusinessAccountMember({ businessAccountId, targetIdentity, role: 'admin' });
+ * if (isBusinessAccountActionRequired(result)) {
+ *   const intent: BusinessAccountIntent = result.intent;
+ * }
+ * ```
+ *
+ * @see {@link signBusinessAccountIntent} for signing one of these.
+ * @see {@link BusinessAccountActionRequired} for where an unsigned intent is returned.
  */
 export type BusinessAccountIntent = {
     actionType: string;
@@ -22,7 +33,17 @@ export type BusinessAccountIntent = {
 type SignBusinessAccountIntentParams = {
     intent: BusinessAccountIntent;
 };
-/** The signed intent and the signature over its canonical form. */
+/**
+ * The signed intent and the signature over its canonical form.
+ *
+ * @example
+ * ```ts
+ * const signed: SignBusinessAccountIntentResult = await signBusinessAccountIntent({ intent });
+ * ```
+ *
+ * @see {@link signBusinessAccountIntent} for producing this shape.
+ * @see {@link SignedBusinessAccountIntent} for resending it to a governed mutation.
+ */
 export type SignBusinessAccountIntentResult = {
     intent: BusinessAccountIntent;
     intentSignature: string;
@@ -40,7 +61,7 @@ export type SignBusinessAccountIntentResult = {
  * WebCrypto verify expects.
  *
  * @param params.intent - The intent to sign.
- * @param client - The Dynamic client instance.
+ * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
  * @returns The intent alongside the P1363 hex signature over its canonical form.
  *
  * @example
@@ -50,16 +71,27 @@ export type SignBusinessAccountIntentResult = {
  *
  * @see {@link signBusinessAccountApproval} for a co-signer approving this intent.
  * @see {@link BusinessAccountIntent} for the shape being signed.
+ * @noHook A local crypto step inside a larger flow, not a standalone server mutation a component would drive loading/error state around.
  * @notInstrumented
  */
-export declare const signBusinessAccountIntent: ({ intent }: SignBusinessAccountIntentParams, client: DynamicClient) => Promise<SignBusinessAccountIntentResult>;
+export declare const signBusinessAccountIntent: ({ intent }: SignBusinessAccountIntentParams, client?: DynamicClient) => Promise<SignBusinessAccountIntentResult>;
 type SignBusinessAccountApprovalParams = {
     /** Defaults to now. Accepted for tests and for a caller that has already
      *  recorded when the human consented. */
     approvedAt?: string;
     intent: BusinessAccountIntent;
 };
-/** An approval's signature and the timestamp it was signed over. */
+/**
+ * An approval's signature and the timestamp it was signed over.
+ *
+ * @example
+ * ```ts
+ * const { approvedAt, signature }: SignBusinessAccountApprovalResult = await signBusinessAccountApproval({ intent });
+ * ```
+ *
+ * @see {@link signBusinessAccountApproval} for producing this shape.
+ * @see {@link approveBusinessAccountProposal} for the usual way to approve a proposal instead.
+ */
 export type SignBusinessAccountApprovalResult = {
     approvedAt: string;
     signature: string;
@@ -78,7 +110,7 @@ export type SignBusinessAccountApprovalResult = {
  *
  * @param params.intent - The intent being approved.
  * @param params.approvedAt - When the approver consented. Defaults to now.
- * @param client - The Dynamic client instance.
+ * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
  * @returns The timestamp signed over, alongside the P1363 hex signature.
  *
  * @example
@@ -88,8 +120,9 @@ export type SignBusinessAccountApprovalResult = {
  *
  * @see {@link signBusinessAccountIntent} for the initiator's own signature over the intent.
  * @see {@link BusinessAccountIntent} for the shape being approved.
+ * @noHook A local crypto step inside a larger flow — {@link approveBusinessAccountProposal} already wraps it for the normal approve-a-proposal case.
  * @notInstrumented
  */
-export declare const signBusinessAccountApproval: ({ intent, approvedAt, }: SignBusinessAccountApprovalParams, client: DynamicClient) => Promise<SignBusinessAccountApprovalResult>;
+export declare const signBusinessAccountApproval: ({ intent, approvedAt, }: SignBusinessAccountApprovalParams, client?: DynamicClient) => Promise<SignBusinessAccountApprovalResult>;
 export {};
 //# sourceMappingURL=signBusinessAccountIntent.d.ts.map

package/dist/modules/sessionKeys/signBusinessAccountIntent/signBusinessAccountIntent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signBusinessAccountIntent.d.ts","sourceRoot":"","sources":["../../../../src/modules/sessionKeys/signBusinessAccountIntent/signBusinessAccountIntent.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAM3D;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;KAAE,CAAC;CACnD,CAAC;AAEF,KAAK,+BAA+B,GAAG;IACrC,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAEF,mEAAmE;AACnE,MAAM,MAAM,+BAA+B,GAAG;IAC5C,MAAM,EAAE,qBAAqB,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,yBAAyB,eACxB,+BAA+B,UACnC,aAAa,KACpB,OAAO,CAAC,+BAA+B,CASzC,CAAC;AAEF,KAAK,iCAAiC,GAAG;IACvC;6CACyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAEF,oEAAoE;AACpE,MAAM,MAAM,iCAAiC,GAAG;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,eAAO,MAAM,2BAA2B,4BAInC,iCAAiC,UAC5B,aAAa,KACpB,OAAO,CAAC,iCAAiC,CAY3C,CAAC"}
+{"version":3,"file":"signBusinessAccountIntent.d.ts","sourceRoot":"","sources":["../../../../src/modules/sessionKeys/signBusinessAccountIntent/signBusinessAccountIntent.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;KAAE,CAAC;CACnD,CAAC;AAEF,KAAK,+BAA+B,GAAG;IACrC,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,MAAM,EAAE,qBAAqB,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,yBAAyB,eACxB,+BAA+B,WACnC,aAAa,KACpB,OAAO,CAAC,+BAA+B,CASzC,CAAC;AAEF,KAAK,iCAAiC,GAAG;IACvC;6CACyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,2BAA2B,4BAInC,iCAAiC,WAC5B,aAAa,KACpB,OAAO,CAAC,iCAAiC,CAY3C,CAAC"}

package/dist/modules/waas/businessAccounts/addBusinessAccountMember/addBusinessAccountMember.d.ts

@@ -1,8 +1,10 @@
 import type { DynamicClient } from '../../../../client/types';
-import type { BusinessAccountActionRequired, BusinessAccountMember, BusinessAccountMemberRole, TargetIdentity } from '../businessAccounts.types';
+import type { BusinessAccountActionRequired, BusinessAccountMember, BusinessAccountMemberRole, SignedBusinessAccountIntent, TargetIdentity } from '../businessAccounts.types';
 type AddMemberParams = {
+    autoExecute?: boolean;
     businessAccountId: string;
     role?: BusinessAccountMemberRole;
+    signed?: SignedBusinessAccountIntent;
     targetIdentity: TargetIdentity;
 };
 /**
@@ -16,18 +18,22 @@ type AddMemberParams = {
  *
  * When the account governs `addMember`, nothing is written and the 202 body is
  * returned instead — first the intent to sign, then the proposal collecting
- * approvals. Narrow it with `isBusinessAccountActionRequired`.
+ * approvals. Narrow it with `isBusinessAccountActionRequired`. Resend with
+ * `signed` (from `signBusinessAccountIntent`) to move past `INTENT_REQUIRED`.
  *
  * @param params.businessAccountId - The ID of the business account.
  * @param params.targetIdentity - The member to add (userId, or identifier + identifierType).
  * @param [params.role] - The member role: a built-in (`admin`, `viewer`) or a
  *   role this account defined. Defaults to `viewer`. `owner` is rejected — use
  *   `transferBusinessAccountOwnership`.
+ * @param [params.autoExecute] - Whether to apply on the completing approval.
+ *   Only meaningful on the first call.
+ * @param [params.signed] - A previously-signed intent, to resend past `INTENT_REQUIRED`.
  * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
  * @returns The created business account member, or the outstanding action required.
  * @throws {UnexpectedConsentResponseError} When a governed account answers 202 with an unrecognized body.
  * @notInstrumented
  */
-export declare const addBusinessAccountMember: ({ businessAccountId, targetIdentity, role }: AddMemberParams, client?: DynamicClient) => Promise<BusinessAccountActionRequired | BusinessAccountMember>;
+export declare const addBusinessAccountMember: ({ businessAccountId, targetIdentity, role, autoExecute, signed }: AddMemberParams, client?: DynamicClient) => Promise<BusinessAccountActionRequired | BusinessAccountMember>;
 export {};
 //# sourceMappingURL=addBusinessAccountMember.d.ts.map

package/dist/modules/waas/businessAccounts/addBusinessAccountMember/addBusinessAccountMember.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"addBusinessAccountMember.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/addBusinessAccountMember/addBusinessAccountMember.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAI9D,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,yBAAyB,EACzB,cAAc,EACf,MAAM,2BAA2B,CAAC;AAGnC,KAAK,eAAe,GAAG;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,yBAAyB,CAAC;IACjC,cAAc,EAAE,cAAc,CAAC;CAChC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,wBAAwB,gDACU,eAAe,WACpD,aAAa,KACpB,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CAqC/D,CAAC"}
+{"version":3,"file":"addBusinessAccountMember.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/addBusinessAccountMember/addBusinessAccountMember.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAI9D,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,yBAAyB,EACzB,2BAA2B,EAC3B,cAAc,EACf,MAAM,2BAA2B,CAAC;AAInC,KAAK,eAAe,GAAG;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,yBAAyB,CAAC;IACjC,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC,cAAc,EAAE,cAAc,CAAC;CAChC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,wBAAwB,qEAC+B,eAAe,WACzE,aAAa,KACpB,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CAsC/D,CAAC"}

package/dist/modules/waas/businessAccounts/addWalletToBusinessAccount/addWalletToBusinessAccount.d.ts

@@ -1,7 +1,9 @@
 import type { DynamicClient } from '../../../../client/types';
-import type { BusinessAccountActionRequired, BusinessAccountDetail } from '../businessAccounts.types';
+import type { BusinessAccountActionRequired, BusinessAccountDetail, SignedBusinessAccountIntent } from '../businessAccounts.types';
 type AddWalletParams = {
+    autoExecute?: boolean;
     businessAccountId?: string;
+    signed?: SignedBusinessAccountIntent;
     walletId: string;
 };
 /**
@@ -15,14 +17,19 @@ type AddWalletParams = {
  *
  * When the account governs `linkWallet`, nothing is written and the 202 body is
  * returned instead — first the intent to sign, then the proposal collecting
- * approvals. Narrow it with `isBusinessAccountActionRequired`.
+ * approvals. Narrow it with `isBusinessAccountActionRequired`. Resend with
+ * `signed` (from `signBusinessAccountIntent`) to move past `INTENT_REQUIRED`.
  *
  * @param [params.businessAccountId] - The business account to link to; found-or-created when omitted.
  * @param params.walletId - The ID of the wallet to link.
+ * @param [params.autoExecute] - Whether to apply on the completing approval.
+ *   Only meaningful on the first call.
+ * @param [params.signed] - A previously-signed intent, to resend past `INTENT_REQUIRED`.
  * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
  * @returns The updated business account detail, or the outstanding action required.
+ * @throws {UnexpectedConsentResponseError} When a governed account answers 202 with an unrecognized body.
  * @notInstrumented
  */
-export declare const addWalletToBusinessAccount: ({ businessAccountId, walletId }: AddWalletParams, client?: DynamicClient) => Promise<BusinessAccountActionRequired | BusinessAccountDetail>;
+export declare const addWalletToBusinessAccount: ({ businessAccountId, walletId, autoExecute, signed }: AddWalletParams, client?: DynamicClient) => Promise<BusinessAccountActionRequired | BusinessAccountDetail>;
 export {};
 //# sourceMappingURL=addWalletToBusinessAccount.d.ts.map

package/dist/modules/waas/businessAccounts/addWalletToBusinessAccount/addWalletToBusinessAccount.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"addWalletToBusinessAccount.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/addWalletToBusinessAccount/addWalletToBusinessAccount.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAI9D,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AAEnC,KAAK,eAAe,GAAG;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,0BAA0B,oCACJ,eAAe,WACxC,aAAa,KACpB,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CA2C/D,CAAC"}
+{"version":3,"file":"addWalletToBusinessAccount.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/addWalletToBusinessAccount/addWalletToBusinessAccount.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAG9D,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AAInC,KAAK,eAAe,GAAG;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,0BAA0B,yDACiB,eAAe,WAC7D,aAAa,KACpB,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CAkC/D,CAAC"}