@dynamic-labs-wallet/browser-wallet-client 1.0.17 → 1.0.18

package/index.cjs

@@ -434,11 +434,40 @@ class IframeManager {
             throw error;
         }
     }
+    /**
+   * Resolves the `hostOrigin` embedded in the iframe URL, validating it so a
+   * caller-supplied value can never become an injection sink.
+   *
+   * Prefers the explicitly-configured `hostOrigin` (required on React Native,
+   * where `globalThis.location.origin` is `localhost`/meaningless), otherwise
+   * falls back to the browser's own origin. Either source is parsed as a URL
+   * and accepted only when it is a well-formed `http(s)` origin — anything else
+   * (`javascript:`, an opaque/malformed string, a non-`http(s)` scheme) is
+   * rejected and yields an empty string rather than being forwarded.
+   */ resolveHostOrigin() {
+        var _globalThis_location;
+        var _this_hostOrigin;
+        const candidate = (_this_hostOrigin = this.hostOrigin) != null ? _this_hostOrigin : (_globalThis_location = globalThis.location) == null ? void 0 : _globalThis_location.origin;
+        if (!candidate) {
+            return '';
+        }
+        try {
+            const url = new URL(candidate);
+            if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+                return '';
+            }
+            return url.origin;
+        } catch (e) {
+            return '';
+        }
+    }
     buildIframeUrlSearchParams() {
         var _this_instanceId, _this_sdkVersion, _this_baseClientKeysharesRelayApiUrl;
         const params = new URLSearchParams({
             instanceId: (_this_instanceId = this.instanceId) != null ? _this_instanceId : '',
-            hostOrigin: window.location.origin,
+            // Validated/normalized origin (explicit hostOrigin on React Native, else
+            // the browser's own origin). See resolveHostOrigin for the safety checks.
+            hostOrigin: this.resolveHostOrigin(),
             environmentId: this.environmentId,
             baseApiUrl: this.baseApiUrl,
             baseMPCRelayApiUrl: this.baseMPCRelayApiUrl,
@@ -865,7 +894,13 @@ class IframeManager {
    * @param {HTMLElement} container - The container to which the iframe will be attached
    * @returns {Promise<HTMLIFrameElement>} that resolves when the iframe is loaded
    */ loadIframeForContainer(container) {
-        return new Promise((resolve, reject)=>{
+        /* eslint-disable no-restricted-globals -- This is the sanctioned web-only
+       DOM boundary for the embedded display iframe. `window`/`document` are
+       banned across browser-wallet-client (they are undefined on React Native /
+       Hermes and would crash the RN export path); this single method is the one
+       place allowed to touch them, mirroring the `createIframeWaasSDKContainer`
+       and `messageTransportBridge` web-only files. It is never reached on RN —
+       the native WebView container path is used there instead. */ return new Promise((resolve, reject)=>{
             var _this_sdkVersion;
             const context = {
                 iframeDomain: this.iframeDomain,
@@ -930,7 +965,7 @@ class IframeManager {
             };
             window.addEventListener('message', messageListener);
         });
-    }
+    /* eslint-enable no-restricted-globals */ }
     /**
    * Initializes the iframe display for a specific container.
    *
@@ -970,6 +1005,102 @@ class IframeManager {
             throw error;
         }
     }
+    /**
+   * Drives the handshake load for a caller-provided {@link WaasSDKContainer}
+   * used as a *visible* private-key display surface (e.g. a React Native native
+   * WebView). Resolves once the container reports the
+   * `iframe-ready-${instanceId}` handshake; rejects on a container-level error
+   * or load timeout.
+   *
+   * Unlike {@link loadIframe}, this deliberately does NOT touch the shared
+   * signing container or its retry/static state: the display container is owned
+   * by the caller, lives only for the duration of a single export ceremony, and
+   * renders the key inside its own sandboxed document. The key is therefore
+   * never sent back across the bridge to the host — keeping the
+   * "host cannot read the key" invariant identical to the web iframe path.
+   */ loadWaasSDKContainerForDisplay(waasSDKContainer) {
+        return new Promise((resolve, reject)=>{
+            // settle() captures timeoutId/unsubscribe* declared below; they are
+            // assigned synchronously before any async callback (setUrl rejection,
+            // onError, onMessage, timeout) can fire, so the references are always live.
+            const settle = (error)=>{
+                clearTimeout(timeoutId);
+                unsubscribeHandshake();
+                unsubscribeError();
+                if (error) {
+                    // Avoid Object's default '[object Object]' stringification: keep Error
+                    // instances as-is, use a string reason directly, otherwise a stable
+                    // message (the raw non-Error value carries no reliable text).
+                    const reason = typeof error === 'string' ? error : 'Display container failed to load';
+                    reject(error instanceof Error ? error : new Error(reason));
+                } else {
+                    resolve();
+                }
+            };
+            const timeoutId = setTimeout(()=>{
+                settle(new Error('Display container load timeout'));
+            }, IframeManager.iframeLoadTimeout);
+            // Surface container-level errors (load failure, navigation/CSP block) so
+            // we don't wait out the full timeout.
+            const unsubscribeError = waasSDKContainer.onError((error)=>{
+                settle(error != null ? error : new Error('Display container failed to load'));
+            });
+            // The hosted page posts `iframe-ready-${instanceId}` once it is ready to
+            // receive transport messages — the same handshake the signing container uses.
+            const unsubscribeHandshake = waasSDKContainer.onMessage((data)=>{
+                if (data === `iframe-ready-${this.instanceId}`) {
+                    settle();
+                }
+            });
+            const url = this.buildIframeUrl();
+            this.logger.debug('Loading display container with src:', url);
+            waasSDKContainer.setUrl(url).catch((error)=>{
+                settle(error);
+            });
+        });
+    }
+    /**
+   * Initializes a private-key display surface backed by a caller-provided
+   * {@link WaasSDKContainer} (e.g. a visible React Native WebView) instead of a
+   * DOM {@link HTMLElement}. This is the container-based counterpart to
+   * {@link initializeIframeDisplayForContainer}: it reuses the same
+   * {@link setupWaasSDKContainerBridge} transport wiring the signing flow uses,
+   * so the export ceremony runs — and the key is rendered — entirely inside the
+   * container's own sandboxed document.
+   *
+   * The caller owns the container's mount/visibility. The returned `cleanup`
+   * detaches the transport bridge and calls `container.destroy()`.
+   */ async initializeDisplayForWaasSDKContainer({ waasSDKContainer }) {
+        try {
+            await this.loadWaasSDKContainerForDisplay(waasSDKContainer);
+            const transport = messageTransport.applyDefaultMessageOrigin({
+                defaultOrigin: 'host',
+                messageTransport: messageTransport.createMessageTransport()
+            });
+            const cleanupBridge = this.setupWaasSDKContainerBridge(transport, waasSDKContainer);
+            const iframeDisplay = new iframeMessageHandler(transport);
+            // Set up iframe request handlers on this transport so the display
+            // container can access key shares (e.g. for exportPrivateKey) and the
+            // signed session ID — mirrors initializeIframeDisplayForContainer.
+            if (this.secureStorage || this.getSignedSessionIdCallback) {
+                this.setupIframeRequestHandlers(transport);
+            }
+            var _this_authMode;
+            // if authMode is header: inform the container of the authMode with auth token
+            // if authMode is cookie:  inform the container of the authMode with empty authToken
+            await iframeDisplay.sendAuthToken(this.authToken, (_this_authMode = this.authMode) != null ? _this_authMode : core.AuthMode.HEADER);
+            return {
+                iframeDisplay,
+                cleanup: ()=>{
+                    cleanupBridge();
+                    waasSDKContainer.destroy();
+                }
+            };
+        } catch (error) {
+            this.logger.error('Error initializing display container:', error);
+            throw error;
+        }
+    }
     async cleanup() {
         await this.initializeMessageTransport();
         if (!this.iframeMessageHandler) {
@@ -1025,7 +1156,7 @@ class IframeManager {
             this.unauthorizedHandled = false;
         }
     }
-    constructor({ environmentId, baseApiUrl, baseMPCRelayApiUrl, chainName, sdkVersion, authMode = core.AuthMode.HEADER, authToken, debug, baseClientKeysharesRelayApiUrl, additionalTrustedOrigins, iframeLoadTimeout, maxRetryAttempts }, internalOptions){
+    constructor({ environmentId, baseApiUrl, baseMPCRelayApiUrl, chainName, sdkVersion, authMode = core.AuthMode.HEADER, authToken, debug, baseClientKeysharesRelayApiUrl, additionalTrustedOrigins, hostOrigin, iframeLoadTimeout, maxRetryAttempts }, internalOptions){
         this.logger = logger;
         this.instanceId = null;
         this.iframeDomain = null;
@@ -1051,6 +1182,7 @@ class IframeManager {
         this.additionalTrustedOrigins = additionalTrustedOrigins ? [
             ...additionalTrustedOrigins
         ] : [];
+        this.hostOrigin = hostOrigin;
         // Set secure storage adapter if provided (internal use only)
         if (internalOptions == null ? void 0 : internalOptions.secureStorage) {
             this.secureStorage = internalOptions.secureStorage;
@@ -1344,8 +1476,24 @@ class DynamicWalletClient extends IframeManager {
                 traceContext
             }));
     }
-    async exportPrivateKey({ accountAddress, elevatedAccessToken, displayContainer, password, signedSessionId, authToken, mfaToken, traceContext, bitcoinConfig }) {
-        const { iframeDisplay } = await this.initializeIframeDisplayForContainer({
+    async exportPrivateKey({ accountAddress, elevatedAccessToken, displayContainer, container, password, signedSessionId, authToken, mfaToken, traceContext, bitcoinConfig }) {
+        // Exactly one display surface is required. `displayContainer` (a DOM element,
+        // web) injects a visible iframe into the page; `container` (a
+        // WaasSDKContainer, e.g. a React Native native WebView) drives the ceremony
+        // over the message bridge. Both render the key inside their own sandboxed
+        // document, so the raw key never crosses back to the host.
+        if (displayContainer && container) {
+            throw new Error('exportPrivateKey accepts either displayContainer (web) or container (native), not both');
+        }
+        if (!displayContainer && !container) {
+            throw new Error('exportPrivateKey requires a displayContainer (web) or a container (native)');
+        }
+        // The guards above guarantee exactly one is set, so when `container` is
+        // absent `displayContainer` is necessarily present (TS cannot narrow this
+        // across the two runtime guards, hence the assertion).
+        const { iframeDisplay } = container ? await this.initializeDisplayForWaasSDKContainer({
+            waasSDKContainer: container
+        }) : await this.initializeIframeDisplayForContainer({
             container: displayContainer
         });
         if (!iframeDisplay) {
@@ -1495,7 +1643,7 @@ class DynamicWalletClient extends IframeManager {
                 traceContext
             }));
     }
-    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, baseClientKeysharesRelayApiUrl, chainName, sdkVersion, debug, authMode = core.AuthMode.HEADER, additionalTrustedOrigins, iframeLoadTimeout, maxRetryAttempts }, internalOptions){
+    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, baseClientKeysharesRelayApiUrl, chainName, sdkVersion, debug, authMode = core.AuthMode.HEADER, additionalTrustedOrigins, hostOrigin, iframeLoadTimeout, maxRetryAttempts }, internalOptions){
         super({
             environmentId,
             authToken,
@@ -1507,6 +1655,7 @@ class DynamicWalletClient extends IframeManager {
             debug,
             authMode,
             additionalTrustedOrigins,
+            hostOrigin,
             iframeLoadTimeout,
             maxRetryAttempts
         }, internalOptions);

package/index.esm.js

@@ -433,11 +433,40 @@ class IframeManager {
             throw error;
         }
     }
+    /**
+   * Resolves the `hostOrigin` embedded in the iframe URL, validating it so a
+   * caller-supplied value can never become an injection sink.
+   *
+   * Prefers the explicitly-configured `hostOrigin` (required on React Native,
+   * where `globalThis.location.origin` is `localhost`/meaningless), otherwise
+   * falls back to the browser's own origin. Either source is parsed as a URL
+   * and accepted only when it is a well-formed `http(s)` origin — anything else
+   * (`javascript:`, an opaque/malformed string, a non-`http(s)` scheme) is
+   * rejected and yields an empty string rather than being forwarded.
+   */ resolveHostOrigin() {
+        var _globalThis_location;
+        var _this_hostOrigin;
+        const candidate = (_this_hostOrigin = this.hostOrigin) != null ? _this_hostOrigin : (_globalThis_location = globalThis.location) == null ? void 0 : _globalThis_location.origin;
+        if (!candidate) {
+            return '';
+        }
+        try {
+            const url = new URL(candidate);
+            if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+                return '';
+            }
+            return url.origin;
+        } catch (e) {
+            return '';
+        }
+    }
     buildIframeUrlSearchParams() {
         var _this_instanceId, _this_sdkVersion, _this_baseClientKeysharesRelayApiUrl;
         const params = new URLSearchParams({
             instanceId: (_this_instanceId = this.instanceId) != null ? _this_instanceId : '',
-            hostOrigin: window.location.origin,
+            // Validated/normalized origin (explicit hostOrigin on React Native, else
+            // the browser's own origin). See resolveHostOrigin for the safety checks.
+            hostOrigin: this.resolveHostOrigin(),
             environmentId: this.environmentId,
             baseApiUrl: this.baseApiUrl,
             baseMPCRelayApiUrl: this.baseMPCRelayApiUrl,
@@ -864,7 +893,13 @@ class IframeManager {
    * @param {HTMLElement} container - The container to which the iframe will be attached
    * @returns {Promise<HTMLIFrameElement>} that resolves when the iframe is loaded
    */ loadIframeForContainer(container) {
-        return new Promise((resolve, reject)=>{
+        /* eslint-disable no-restricted-globals -- This is the sanctioned web-only
+       DOM boundary for the embedded display iframe. `window`/`document` are
+       banned across browser-wallet-client (they are undefined on React Native /
+       Hermes and would crash the RN export path); this single method is the one
+       place allowed to touch them, mirroring the `createIframeWaasSDKContainer`
+       and `messageTransportBridge` web-only files. It is never reached on RN —
+       the native WebView container path is used there instead. */ return new Promise((resolve, reject)=>{
             var _this_sdkVersion;
             const context = {
                 iframeDomain: this.iframeDomain,
@@ -929,7 +964,7 @@ class IframeManager {
             };
             window.addEventListener('message', messageListener);
         });
-    }
+    /* eslint-enable no-restricted-globals */ }
     /**
    * Initializes the iframe display for a specific container.
    *
@@ -969,6 +1004,102 @@ class IframeManager {
             throw error;
         }
     }
+    /**
+   * Drives the handshake load for a caller-provided {@link WaasSDKContainer}
+   * used as a *visible* private-key display surface (e.g. a React Native native
+   * WebView). Resolves once the container reports the
+   * `iframe-ready-${instanceId}` handshake; rejects on a container-level error
+   * or load timeout.
+   *
+   * Unlike {@link loadIframe}, this deliberately does NOT touch the shared
+   * signing container or its retry/static state: the display container is owned
+   * by the caller, lives only for the duration of a single export ceremony, and
+   * renders the key inside its own sandboxed document. The key is therefore
+   * never sent back across the bridge to the host — keeping the
+   * "host cannot read the key" invariant identical to the web iframe path.
+   */ loadWaasSDKContainerForDisplay(waasSDKContainer) {
+        return new Promise((resolve, reject)=>{
+            // settle() captures timeoutId/unsubscribe* declared below; they are
+            // assigned synchronously before any async callback (setUrl rejection,
+            // onError, onMessage, timeout) can fire, so the references are always live.
+            const settle = (error)=>{
+                clearTimeout(timeoutId);
+                unsubscribeHandshake();
+                unsubscribeError();
+                if (error) {
+                    // Avoid Object's default '[object Object]' stringification: keep Error
+                    // instances as-is, use a string reason directly, otherwise a stable
+                    // message (the raw non-Error value carries no reliable text).
+                    const reason = typeof error === 'string' ? error : 'Display container failed to load';
+                    reject(error instanceof Error ? error : new Error(reason));
+                } else {
+                    resolve();
+                }
+            };
+            const timeoutId = setTimeout(()=>{
+                settle(new Error('Display container load timeout'));
+            }, IframeManager.iframeLoadTimeout);
+            // Surface container-level errors (load failure, navigation/CSP block) so
+            // we don't wait out the full timeout.
+            const unsubscribeError = waasSDKContainer.onError((error)=>{
+                settle(error != null ? error : new Error('Display container failed to load'));
+            });
+            // The hosted page posts `iframe-ready-${instanceId}` once it is ready to
+            // receive transport messages — the same handshake the signing container uses.
+            const unsubscribeHandshake = waasSDKContainer.onMessage((data)=>{
+                if (data === `iframe-ready-${this.instanceId}`) {
+                    settle();
+                }
+            });
+            const url = this.buildIframeUrl();
+            this.logger.debug('Loading display container with src:', url);
+            waasSDKContainer.setUrl(url).catch((error)=>{
+                settle(error);
+            });
+        });
+    }
+    /**
+   * Initializes a private-key display surface backed by a caller-provided
+   * {@link WaasSDKContainer} (e.g. a visible React Native WebView) instead of a
+   * DOM {@link HTMLElement}. This is the container-based counterpart to
+   * {@link initializeIframeDisplayForContainer}: it reuses the same
+   * {@link setupWaasSDKContainerBridge} transport wiring the signing flow uses,
+   * so the export ceremony runs — and the key is rendered — entirely inside the
+   * container's own sandboxed document.
+   *
+   * The caller owns the container's mount/visibility. The returned `cleanup`
+   * detaches the transport bridge and calls `container.destroy()`.
+   */ async initializeDisplayForWaasSDKContainer({ waasSDKContainer }) {
+        try {
+            await this.loadWaasSDKContainerForDisplay(waasSDKContainer);
+            const transport = applyDefaultMessageOrigin({
+                defaultOrigin: 'host',
+                messageTransport: createMessageTransport()
+            });
+            const cleanupBridge = this.setupWaasSDKContainerBridge(transport, waasSDKContainer);
+            const iframeDisplay = new iframeMessageHandler(transport);
+            // Set up iframe request handlers on this transport so the display
+            // container can access key shares (e.g. for exportPrivateKey) and the
+            // signed session ID — mirrors initializeIframeDisplayForContainer.
+            if (this.secureStorage || this.getSignedSessionIdCallback) {
+                this.setupIframeRequestHandlers(transport);
+            }
+            var _this_authMode;
+            // if authMode is header: inform the container of the authMode with auth token
+            // if authMode is cookie:  inform the container of the authMode with empty authToken
+            await iframeDisplay.sendAuthToken(this.authToken, (_this_authMode = this.authMode) != null ? _this_authMode : AuthMode.HEADER);
+            return {
+                iframeDisplay,
+                cleanup: ()=>{
+                    cleanupBridge();
+                    waasSDKContainer.destroy();
+                }
+            };
+        } catch (error) {
+            this.logger.error('Error initializing display container:', error);
+            throw error;
+        }
+    }
     async cleanup() {
         await this.initializeMessageTransport();
         if (!this.iframeMessageHandler) {
@@ -1024,7 +1155,7 @@ class IframeManager {
             this.unauthorizedHandled = false;
         }
     }
-    constructor({ environmentId, baseApiUrl, baseMPCRelayApiUrl, chainName, sdkVersion, authMode = AuthMode.HEADER, authToken, debug, baseClientKeysharesRelayApiUrl, additionalTrustedOrigins, iframeLoadTimeout, maxRetryAttempts }, internalOptions){
+    constructor({ environmentId, baseApiUrl, baseMPCRelayApiUrl, chainName, sdkVersion, authMode = AuthMode.HEADER, authToken, debug, baseClientKeysharesRelayApiUrl, additionalTrustedOrigins, hostOrigin, iframeLoadTimeout, maxRetryAttempts }, internalOptions){
         this.logger = logger;
         this.instanceId = null;
         this.iframeDomain = null;
@@ -1050,6 +1181,7 @@ class IframeManager {
         this.additionalTrustedOrigins = additionalTrustedOrigins ? [
             ...additionalTrustedOrigins
         ] : [];
+        this.hostOrigin = hostOrigin;
         // Set secure storage adapter if provided (internal use only)
         if (internalOptions == null ? void 0 : internalOptions.secureStorage) {
             this.secureStorage = internalOptions.secureStorage;
@@ -1343,8 +1475,24 @@ class DynamicWalletClient extends IframeManager {
                 traceContext
             }));
     }
-    async exportPrivateKey({ accountAddress, elevatedAccessToken, displayContainer, password, signedSessionId, authToken, mfaToken, traceContext, bitcoinConfig }) {
-        const { iframeDisplay } = await this.initializeIframeDisplayForContainer({
+    async exportPrivateKey({ accountAddress, elevatedAccessToken, displayContainer, container, password, signedSessionId, authToken, mfaToken, traceContext, bitcoinConfig }) {
+        // Exactly one display surface is required. `displayContainer` (a DOM element,
+        // web) injects a visible iframe into the page; `container` (a
+        // WaasSDKContainer, e.g. a React Native native WebView) drives the ceremony
+        // over the message bridge. Both render the key inside their own sandboxed
+        // document, so the raw key never crosses back to the host.
+        if (displayContainer && container) {
+            throw new Error('exportPrivateKey accepts either displayContainer (web) or container (native), not both');
+        }
+        if (!displayContainer && !container) {
+            throw new Error('exportPrivateKey requires a displayContainer (web) or a container (native)');
+        }
+        // The guards above guarantee exactly one is set, so when `container` is
+        // absent `displayContainer` is necessarily present (TS cannot narrow this
+        // across the two runtime guards, hence the assertion).
+        const { iframeDisplay } = container ? await this.initializeDisplayForWaasSDKContainer({
+            waasSDKContainer: container
+        }) : await this.initializeIframeDisplayForContainer({
             container: displayContainer
         });
         if (!iframeDisplay) {
@@ -1494,7 +1642,7 @@ class DynamicWalletClient extends IframeManager {
                 traceContext
             }));
     }
-    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, baseClientKeysharesRelayApiUrl, chainName, sdkVersion, debug, authMode = AuthMode.HEADER, additionalTrustedOrigins, iframeLoadTimeout, maxRetryAttempts }, internalOptions){
+    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, baseClientKeysharesRelayApiUrl, chainName, sdkVersion, debug, authMode = AuthMode.HEADER, additionalTrustedOrigins, hostOrigin, iframeLoadTimeout, maxRetryAttempts }, internalOptions){
         super({
             environmentId,
             authToken,
@@ -1506,6 +1654,7 @@ class DynamicWalletClient extends IframeManager {
             debug,
             authMode,
             additionalTrustedOrigins,
+            hostOrigin,
             iframeLoadTimeout,
             maxRetryAttempts
         }, internalOptions);

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@dynamic-labs-wallet/browser-wallet-client",
-  "version": "1.0.17",
+  "version": "1.0.18",
   "license": "MIT",
   "type": "module",
   "dependencies": {
-    "@dynamic-labs-wallet/core": "1.0.17",
+    "@dynamic-labs-wallet/core": "1.0.18",
     "@dynamic-labs/logger": "^4.45.2",
     "@dynamic-labs/message-transport": "^4.45.2"
   },

package/src/client/client.d.ts

@@ -1,8 +1,8 @@
-import type { BackupKeySharesToGoogleDriveRequest, BackupKeySharesToICloudRequest, BitcoinConfig, CreateWaasSDKContainer, CreateWalletAccountRequest, CreateWalletAccountResponse, DelegateKeySharesRequest, ExportClientKeysharesRequest, GetWalletRecoveryStateRequest, GetWalletResponse, ImportPrivateKeyRequest, IsPasswordEncryptedRequest, OfflineExportPrivateKeyResponse, RefreshWalletAccountSharesRequest, RequestWithElevatedAccessToken, RequestWithTraceContext, RequiresPasswordForOperationRequest, ReshareRequest, RevokeDelegationRequest, SecureStorageAdapter, SetPasswordRequest, SignMessageRequestBrowser, SignRawMessageRequest, SignTransactionRequest, SignTypedDataRequest, UnlockWalletRequest, UpdatePasswordRequest, VerifyPasswordRequest, WalletRecoveryState } from '@dynamic-labs-wallet/core';
+import type { BackupKeySharesToGoogleDriveRequest, BackupKeySharesToICloudRequest, BitcoinConfig, CreateWaasSDKContainer, CreateWalletAccountRequest, CreateWalletAccountResponse, DelegateKeySharesRequest, ExportClientKeysharesRequest, GetWalletRecoveryStateRequest, GetWalletResponse, ImportPrivateKeyRequest, IsPasswordEncryptedRequest, OfflineExportPrivateKeyResponse, RefreshWalletAccountSharesRequest, RequestWithElevatedAccessToken, RequestWithTraceContext, RequiresPasswordForOperationRequest, ReshareRequest, RevokeDelegationRequest, SecureStorageAdapter, SetPasswordRequest, SignMessageRequestBrowser, SignRawMessageRequest, SignTransactionRequest, SignTypedDataRequest, UnlockWalletRequest, UpdatePasswordRequest, VerifyPasswordRequest, WaasSDKContainer, WalletRecoveryState } from '@dynamic-labs-wallet/core';
 import { AuthMode, WalletOperation } from '@dynamic-labs-wallet/core';
 import { IframeManager } from './iframeManager/index.js';
 export declare class DynamicWalletClient extends IframeManager {
-    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, baseClientKeysharesRelayApiUrl, chainName, sdkVersion, debug, authMode, additionalTrustedOrigins, iframeLoadTimeout, maxRetryAttempts, }: {
+    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, baseClientKeysharesRelayApiUrl, chainName, sdkVersion, debug, authMode, additionalTrustedOrigins, hostOrigin, iframeLoadTimeout, maxRetryAttempts, }: {
         environmentId: string;
         authToken: string;
         baseApiUrl: string;
@@ -13,6 +13,11 @@ export declare class DynamicWalletClient extends IframeManager {
         authMode?: AuthMode;
         baseClientKeysharesRelayApiUrl?: string;
         additionalTrustedOrigins?: readonly string[];
+        /**
+         * Explicit `hostOrigin` for the hosted iframe URL. Required on React
+         * Native (pass the app's universalLink); browsers may omit it.
+         */
+        hostOrigin?: string;
         /**
          * Initial timeout (ms) for the iframe boot handshake. Doubles on each
          * failed attempt up to 60s. Defaults to 20s.
@@ -76,9 +81,10 @@ export declare class DynamicWalletClient extends IframeManager {
     }>): Promise<void>;
     refreshWalletAccountShares({ accountAddress, password, signedSessionId, authToken, mfaToken, elevatedAccessToken, traceContext, }: RequestWithTraceContext<RequestWithElevatedAccessToken<Omit<RefreshWalletAccountSharesRequest, 'chainName'>>>): Promise<void>;
     reshare({ accountAddress, oldThresholdSignatureScheme, newThresholdSignatureScheme, password, signedSessionId, authToken, mfaToken, elevatedAccessToken, traceContext, }: RequestWithTraceContext<RequestWithElevatedAccessToken<Omit<ReshareRequest, 'chainName'>>>): Promise<void>;
-    exportPrivateKey({ accountAddress, elevatedAccessToken, displayContainer, password, signedSessionId, authToken, mfaToken, traceContext, bitcoinConfig, }: RequestWithTraceContext<RequestWithElevatedAccessToken<{
+    exportPrivateKey({ accountAddress, elevatedAccessToken, displayContainer, container, password, signedSessionId, authToken, mfaToken, traceContext, bitcoinConfig, }: RequestWithTraceContext<RequestWithElevatedAccessToken<{
         accountAddress: string;
-        displayContainer: HTMLElement;
+        displayContainer?: HTMLElement;
+        container?: WaasSDKContainer;
         password?: string;
         signedSessionId: string;
         authToken?: string;

package/src/client/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mCAAmC,EACnC,8BAA8B,EAC9B,aAAa,EACb,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,4BAA4B,EAC5B,6BAA6B,EAC7B,iBAAiB,EACjB,uBAAuB,EACvB,0BAA0B,EAC1B,+BAA+B,EAC/B,iCAAiC,EACjC,8BAA8B,EAC9B,uBAAuB,EACvB,mCAAmC,EACnC,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,qBAAa,mBAAoB,SAAQ,aAAa;gBAElD,EACE,aAAa,EACb,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,8BAA8B,EAC9B,SAAS,EACT,UAAU,EACV,KAAK,EACL,QAA0B,EAC1B,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,GACjB,EAAE;QACD,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7C;;;WAGG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;WAGG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,EACD,eAAe,CAAC,EAAE;QAChB,aAAa,CAAC,EAAE,oBAAoB,CAAC;QACrC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;QAChD,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7C;YAsBW,WAAW;IAUnB,UAAU,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAQ1C,aAAa,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAQ7C,SAAS,CAAC,EACd,cAAc,EACd,eAA8C,EAC9C,eAAe,EACf,SAAS,GACV,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,eAAe,CAAC;QAClC,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB;IAYK,sBAAsB,CAAC,EAC3B,cAAc,EACd,SAAS,EACT,eAAe,EACf,QAAQ,EACR,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAarG,YAAY,CAAC,EACjB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAazF,mBAAmB,CAAC,EACxB,wBAAwB,EACxB,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,YAAY,EACZ,aAAa,GACd,EAAE,uBAAuB,CAAC,IAAI,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAc1G,4BAA4B,CAAC,EACjC,cAAc,EACd,eAAiD,EACjD,SAAS,GACV,EAAE,IAAI,CAAC,mCAAmC,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAWtE,mBAAmB,CAAC,EACxB,cAAc,EACd,SAAS,GACV,EAAE,IAAI,CAAC,0BAA0B,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAU7D,WAAW,CAAC,EAChB,OAAO,EACP,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,YAAY,EACZ,aAAa,GACd,EAAE,uBAAuB,CACxB,8BAA8B,CAAC,IAAI,CAAC,yBAAyB,EAAE,WAAW,CAAC,CAAC,CAC7E,GAAG,OAAO,CAAC,MAAM,CAAC;IAsBb,cAAc,CAAC,EACnB,OAAO,EACP,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,YAAY,EACZ,aAAa,GACd,EAAE,uBAAuB,CACxB,8BAA8B,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC,CACzE,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBnB;;;;;;;;;;OAUG;IACG,eAAe,CAAC,EACpB,aAAa,EACb,WAAW,EACX,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,YAAY,EACZ,aAAa,GACd,EAAE,uBAAuB,CACxB,8BAA8B,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC,CAC1E,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBb,aAAa,CAAC,EAClB,cAAc,EACd,SAAS,EACT,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,YAAY,GACb,EAAE,uBAAuB,CACxB,8BAA8B,CAAC,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC,CACxE,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBb,4BAA4B,CAAC,EACjC,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,mCAAmC,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAc5F,uBAAuB,CAAC,EAC5B,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,8BAA8B,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAavF,mBAAmB,CAAC,EAAE,gBAAgB,EAAE,EAAE;QAAE,gBAAgB,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAW3F,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC;IAIzC,iBAAiB,CAAC,EACtB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAcjF,gBAAgB,CAAC,EACrB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAchF,oCAAoC,CAAC,EACzC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,YAAY,GACb,EAAE,uBAAuB,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAcZ,0BAA0B,CAAC,EAC/B,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,YAAY,GACb,EAAE,uBAAuB,CACxB,8BAA8B,CAAC,IAAI,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC,CACrF,GAAG,OAAO,CAAC,IAAI,CAAC;IAeX,OAAO,CAAC,EACZ,cAAc,EACd,2BAA2B,EAC3B,2BAA2B,EAC3B,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,YAAY,GACb,EAAE,uBAAuB,CAAC,8BAA8B,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBvG,gBAAgB,CAAC,EACrB,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,aAAa,GACd,EAAE,uBAAuB,CACxB,8BAA8B,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,WAAW,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B,CAAC,CACH,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBjB;;;;OAIG;IACG,gBAAgB,CAAC,EACrB,cAAc,EACd,SAAS,EACT,YAAY,EACZ,MAAM,EACN,UAAU,EACV,SAAS,EACT,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,YAAY,GACb,EAAE,uBAAuB,CACxB,8BAA8B,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;gFAEwE;QACxE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KAC3B,CAAC,CACH,GAAG,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IA4BzD;;;;;;OAMG;IACG,gBAAgB,CAAC,EACrB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,YAAY,GACb,EAAE,uBAAuB,CACxB,8BAA8B,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;oEAE4D;QAC5D,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KAC3B,CAAC,CACH,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;IAsBnC;;;;;;;OAOG;IACG,sBAAsB,CAAC,EAC3B,SAAS,EACT,YAAY,EACZ,OAAO,EACP,YAAY,GACb,EAAE,uBAAuB,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KAC3B,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBf,cAAc,CAAC,EACnB,cAAc,EACd,QAAQ,EACR,eAA8C,EAC9C,eAAe,EACf,SAAS,EACT,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAc9E,cAAc,CAAC,EACnB,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,SAAS,EACT,qBAAqB,EACrB,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAe9E,WAAW,CAAC,EAChB,cAAc,EACd,WAAW,EACX,eAAe,EACf,SAAS,EACT,qBAAqB,EACrB,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAc3E,gBAAgB,CAAC,EACrB,UAAU,EACV,wBAAwB,EACxB,QAAQ,EACR,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,cAAc,GACf,EAAE,uBAAuB,CAAC,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAiBvG,qBAAqB,CAAC,EAC1B,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,4BAA4B,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAa3F;;OAEG;IACG,uBAAuB,CAAC,EAC5B,SAAS,EACT,cAAc,EACd,YAAY,GACb,EAAE,uBAAuB,CAAC;QACzB,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC,GAAG,OAAO,CAAC,+BAA+B,CAAC;CAmB9C"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mCAAmC,EACnC,8BAA8B,EAC9B,aAAa,EACb,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,4BAA4B,EAC5B,6BAA6B,EAC7B,iBAAiB,EACjB,uBAAuB,EACvB,0BAA0B,EAC1B,+BAA+B,EAC/B,iCAAiC,EACjC,8BAA8B,EAC9B,uBAAuB,EACvB,mCAAmC,EACnC,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,qBAAa,mBAAoB,SAAQ,aAAa;gBAElD,EACE,aAAa,EACb,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,8BAA8B,EAC9B,SAAS,EACT,UAAU,EACV,KAAK,EACL,QAA0B,EAC1B,wBAAwB,EACxB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,GACjB,EAAE;QACD,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7C;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;;;WAGG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;WAGG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,EACD,eAAe,CAAC,EAAE;QAChB,aAAa,CAAC,EAAE,oBAAoB,CAAC;QACrC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;QAChD,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7C;YAuBW,WAAW;IAUnB,UAAU,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAQ1C,aAAa,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAQ7C,SAAS,CAAC,EACd,cAAc,EACd,eAA8C,EAC9C,eAAe,EACf,SAAS,GACV,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,eAAe,CAAC;QAClC,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB;IAYK,sBAAsB,CAAC,EAC3B,cAAc,EACd,SAAS,EACT,eAAe,EACf,QAAQ,EACR,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAarG,YAAY,CAAC,EACjB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAazF,mBAAmB,CAAC,EACxB,wBAAwB,EACxB,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,YAAY,EACZ,aAAa,GACd,EAAE,uBAAuB,CAAC,IAAI,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAc1G,4BAA4B,CAAC,EACjC,cAAc,EACd,eAAiD,EACjD,SAAS,GACV,EAAE,IAAI,CAAC,mCAAmC,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAWtE,mBAAmB,CAAC,EACxB,cAAc,EACd,SAAS,GACV,EAAE,IAAI,CAAC,0BAA0B,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAU7D,WAAW,CAAC,EAChB,OAAO,EACP,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,YAAY,EACZ,aAAa,GACd,EAAE,uBAAuB,CACxB,8BAA8B,CAAC,IAAI,CAAC,yBAAyB,EAAE,WAAW,CAAC,CAAC,CAC7E,GAAG,OAAO,CAAC,MAAM,CAAC;IAsBb,cAAc,CAAC,EACnB,OAAO,EACP,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,YAAY,EACZ,aAAa,GACd,EAAE,uBAAuB,CACxB,8BAA8B,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC,CACzE,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBnB;;;;;;;;;;OAUG;IACG,eAAe,CAAC,EACpB,aAAa,EACb,WAAW,EACX,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,YAAY,EACZ,aAAa,GACd,EAAE,uBAAuB,CACxB,8BAA8B,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC,CAC1E,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBb,aAAa,CAAC,EAClB,cAAc,EACd,SAAS,EACT,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,YAAY,GACb,EAAE,uBAAuB,CACxB,8BAA8B,CAAC,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC,CACxE,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBb,4BAA4B,CAAC,EACjC,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,mCAAmC,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAc5F,uBAAuB,CAAC,EAC5B,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,SAAS,EACT,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,8BAA8B,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAavF,mBAAmB,CAAC,EAAE,gBAAgB,EAAE,EAAE;QAAE,gBAAgB,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAW3F,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC;IAIzC,iBAAiB,CAAC,EACtB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAcjF,gBAAgB,CAAC,EACrB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAchF,oCAAoC,CAAC,EACzC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,YAAY,GACb,EAAE,uBAAuB,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAcZ,0BAA0B,CAAC,EAC/B,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,YAAY,GACb,EAAE,uBAAuB,CACxB,8BAA8B,CAAC,IAAI,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC,CACrF,GAAG,OAAO,CAAC,IAAI,CAAC;IAeX,OAAO,CAAC,EACZ,cAAc,EACd,2BAA2B,EAC3B,2BAA2B,EAC3B,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,YAAY,GACb,EAAE,uBAAuB,CAAC,8BAA8B,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBvG,gBAAgB,CAAC,EACrB,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,SAAS,EACT,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,aAAa,GACd,EAAE,uBAAuB,CACxB,8BAA8B,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,WAAW,CAAC;QAC/B,SAAS,CAAC,EAAE,gBAAgB,CAAC;QAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B,CAAC,CACH,GAAG,OAAO,CAAC,IAAI,CAAC;IAuCjB;;;;OAIG;IACG,gBAAgB,CAAC,EACrB,cAAc,EACd,SAAS,EACT,YAAY,EACZ,MAAM,EACN,UAAU,EACV,SAAS,EACT,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,YAAY,GACb,EAAE,uBAAuB,CACxB,8BAA8B,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;gFAEwE;QACxE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KAC3B,CAAC,CACH,GAAG,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IA4BzD;;;;;;OAMG;IACG,gBAAgB,CAAC,EACrB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,YAAY,GACb,EAAE,uBAAuB,CACxB,8BAA8B,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;oEAE4D;QAC5D,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KAC3B,CAAC,CACH,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;IAsBnC;;;;;;;OAOG;IACG,sBAAsB,CAAC,EAC3B,SAAS,EACT,YAAY,EACZ,OAAO,EACP,YAAY,GACb,EAAE,uBAAuB,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KAC3B,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBf,cAAc,CAAC,EACnB,cAAc,EACd,QAAQ,EACR,eAA8C,EAC9C,eAAe,EACf,SAAS,EACT,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAc9E,cAAc,CAAC,EACnB,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,SAAS,EACT,qBAAqB,EACrB,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAe9E,WAAW,CAAC,EAChB,cAAc,EACd,WAAW,EACX,eAAe,EACf,SAAS,EACT,qBAAqB,EACrB,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAc3E,gBAAgB,CAAC,EACrB,UAAU,EACV,wBAAwB,EACxB,QAAQ,EACR,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,cAAc,GACf,EAAE,uBAAuB,CAAC,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAiBvG,qBAAqB,CAAC,EAC1B,cAAc,EACd,QAAQ,EACR,eAAe,EACf,SAAS,EACT,YAAY,GACb,EAAE,uBAAuB,CAAC,IAAI,CAAC,4BAA4B,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAa3F;;OAEG;IACG,uBAAuB,CAAC,EAC5B,SAAS,EACT,cAAc,EACd,YAAY,GACb,EAAE,uBAAuB,CAAC;QACzB,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC,GAAG,OAAO,CAAC,+BAA+B,CAAC;CAmB9C"}

package/src/client/iframeManager/IframeManager.d.ts

@@ -1,4 +1,4 @@
-import { AuthMode, type CreateWaasSDKContainer, type IframeRequestMessages, type SecureStorageAdapter } from '@dynamic-labs-wallet/core';
+import { AuthMode, type CreateWaasSDKContainer, type IframeRequestMessages, type SecureStorageAdapter, type WaasSDKContainer } from '@dynamic-labs-wallet/core';
 import { type MessageTransportWithDefaultOrigin, type RequestChannel } from '@dynamic-labs/message-transport';
 import { iframeMessageHandler } from '../../services/iframeMessageHandler.js';
 export declare class IframeManager {
@@ -9,6 +9,7 @@ export declare class IframeManager {
     environmentId: string;
     private readonly authToken;
     private readonly authMode;
+    private readonly hostOrigin;
     baseApiUrl: string;
     baseMPCRelayApiUrl: string;
     protected messageTransport: MessageTransportWithDefaultOrigin | null;
@@ -84,7 +85,7 @@ export declare class IframeManager {
     private readonly onUnauthorized?;
     /** One-shot guard so a burst of 401 notifications triggers a single logout. */
     private unauthorizedHandled;
-    constructor({ environmentId, baseApiUrl, baseMPCRelayApiUrl, chainName, sdkVersion, authMode, authToken, debug, baseClientKeysharesRelayApiUrl, additionalTrustedOrigins, iframeLoadTimeout, maxRetryAttempts, }: {
+    constructor({ environmentId, baseApiUrl, baseMPCRelayApiUrl, chainName, sdkVersion, authMode, authToken, debug, baseClientKeysharesRelayApiUrl, additionalTrustedOrigins, hostOrigin, iframeLoadTimeout, maxRetryAttempts, }: {
         environmentId: string;
         authMode: AuthMode;
         authToken?: string;
@@ -95,6 +96,12 @@ export declare class IframeManager {
         debug?: boolean;
         baseClientKeysharesRelayApiUrl?: string;
         additionalTrustedOrigins?: readonly string[];
+        /**
+         * Explicit `hostOrigin` for the hosted iframe URL. Required on non-browser
+         * runtimes (React Native) where `window.location.origin` is not a real,
+         * allowlisted origin. When omitted, falls back to `window.location.origin`.
+         */
+        hostOrigin?: string;
         /**
          * Initial timeout in ms for the iframe boot handshake. Defaults to
          * {@link IframeManager.iframeLoadTimeout}. Clamped to
@@ -137,6 +144,18 @@ export declare class IframeManager {
      * and initializing the message transport and iframe storage after iframe is successfully loaded
      */
     private doInitializeIframeCommunication;
+    /**
+     * Resolves the `hostOrigin` embedded in the iframe URL, validating it so a
+     * caller-supplied value can never become an injection sink.
+     *
+     * Prefers the explicitly-configured `hostOrigin` (required on React Native,
+     * where `globalThis.location.origin` is `localhost`/meaningless), otherwise
+     * falls back to the browser's own origin. Either source is parsed as a URL
+     * and accepted only when it is a well-formed `http(s)` origin — anything else
+     * (`javascript:`, an opaque/malformed string, a non-`http(s)` scheme) is
+     * rejected and yields an empty string rather than being forwarded.
+     */
+    private resolveHostOrigin;
     private buildIframeUrlSearchParams;
     /**
      * Build the URL that the transport provider should load.
@@ -224,6 +243,39 @@ export declare class IframeManager {
         iframeDisplay: iframeMessageHandler;
         cleanup: () => void;
     }>;
+    /**
+     * Drives the handshake load for a caller-provided {@link WaasSDKContainer}
+     * used as a *visible* private-key display surface (e.g. a React Native native
+     * WebView). Resolves once the container reports the
+     * `iframe-ready-${instanceId}` handshake; rejects on a container-level error
+     * or load timeout.
+     *
+     * Unlike {@link loadIframe}, this deliberately does NOT touch the shared
+     * signing container or its retry/static state: the display container is owned
+     * by the caller, lives only for the duration of a single export ceremony, and
+     * renders the key inside its own sandboxed document. The key is therefore
+     * never sent back across the bridge to the host — keeping the
+     * "host cannot read the key" invariant identical to the web iframe path.
+     */
+    private loadWaasSDKContainerForDisplay;
+    /**
+     * Initializes a private-key display surface backed by a caller-provided
+     * {@link WaasSDKContainer} (e.g. a visible React Native WebView) instead of a
+     * DOM {@link HTMLElement}. This is the container-based counterpart to
+     * {@link initializeIframeDisplayForContainer}: it reuses the same
+     * {@link setupWaasSDKContainerBridge} transport wiring the signing flow uses,
+     * so the export ceremony runs — and the key is rendered — entirely inside the
+     * container's own sandboxed document.
+     *
+     * The caller owns the container's mount/visibility. The returned `cleanup`
+     * detaches the transport bridge and calls `container.destroy()`.
+     */
+    initializeDisplayForWaasSDKContainer({ waasSDKContainer }: {
+        waasSDKContainer: WaasSDKContainer;
+    }): Promise<{
+        iframeDisplay: iframeMessageHandler;
+        cleanup: () => void;
+    }>;
     cleanup(): Promise<void>;
 }
 //# sourceMappingURL=IframeManager.d.ts.map

package/src/client/iframeManager/IframeManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IframeManager.d.ts","sourceRoot":"","sources":["../../../src/client/iframeManager/IframeManager.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EAGR,KAAK,sBAAsB,EAK3B,KAAK,qBAAqB,EAG1B,KAAK,oBAAoB,EAG1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAOL,KAAK,iCAAiC,EACtC,KAAK,cAAc,EAEpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAoC9E,qBAAa,aAAa;IACxB,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,MAAM,wCAAU;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAQ;IACjC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IACnC,aAAa,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAClC,SAAS,CAAC,gBAAgB,EAAE,iCAAiC,GAAG,IAAI,CAAQ;IAC5E,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,GAAG,IAAI,CAAQ;IACnE;;oDAEgD;IAChD,OAAO,CAAC,aAAa,CAA6B;IAClD;;oDAEgD;IAChD,OAAO,CAAC,2BAA2B,CAA6B;IAChE,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAA8B;IAC9D,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAQ;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;IAChC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAS;IACzC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAK;IACtC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAK;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IACrD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAM;IAC9C,8BAA8B,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1D,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAiC;IACtE,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAK;IAChC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;;;OAIG;IACH,SAAS,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAC/C;;;;OAIG;IACH,SAAS,CAAC,0BAA0B,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D;;;OAGG;IACH,SAAS,CAAC,oBAAoB,CAAC,EAAE,cAAc,CAC7C,IAAI,CAAC,qBAAqB,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,oBAAoB,CAAC,CACrH,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAM;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAO;IAC3D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAoB;IAC7D,OAAO,CAAC,gBAAgB,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAyB;IAChE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAA6B;IAC7D,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB,CAAS;gBAGlC,EACE,aAAa,EACb,UAAU,EACV,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,QAA0B,EAC1B,SAAS,EACT,KAAK,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,GACjB,EAAE;QACD,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,QAAQ,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7C;;;;;WAKG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,EACD,eAAe,CAAC,EAAE;QAChB,aAAa,CAAC,EAAE,oBAAoB,CAAC;QACrC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;QAChD,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7C;IAwCH;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,eAAe;IAsBxB,UAAU;IAIhB;;;OAGG;IACH,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9C;;;OAGG;YACW,+BAA+B;IAS7C,OAAO,CAAC,0BAA0B;IA+ClC;;OAEG;IACH,OAAO,CAAC,cAAc;IAKtB;;;;;;;;OAQG;IACH,OAAO,CAAC,2BAA2B;IAkCnC;;OAEG;cACa,0BAA0B;IAoD1C;;;;;;;OAOG;YACW,aAAa;IAmE3B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAsClC;;;;OAIG;YACW,wBAAwB;IAatC;;OAEG;YACW,uBAAuB;IAQrC;;OAEG;YACW,uBAAuB;IAOrC;;OAEG;YACW,0BAA0B;IAOxC;;OAEG;YACW,wBAAwB;IAQtC;;OAEG;YACW,aAAa;IAY3B;;OAEG;IACH,OAAO,CAAC,2BAA2B;YAkBrB,UAAU;IAiDxB,OAAO,CAAC,iCAAiC;IAgFzC,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAwF9B;;;;;;;;OAQG;IACG,mCAAmC,CAAC,EAAE,SAAS,EAAE,EAAE;QAAE,SAAS,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5F,MAAM,EAAE,iBAAiB,CAAC;QAC1B,aAAa,EAAE,oBAAoB,CAAC;QACpC,OAAO,EAAE,MAAM,IAAI,CAAC;KACrB,CAAC;IAqCW,OAAO;CA4DrB"}
+{"version":3,"file":"IframeManager.d.ts","sourceRoot":"","sources":["../../../src/client/iframeManager/IframeManager.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EAGR,KAAK,sBAAsB,EAK3B,KAAK,qBAAqB,EAG1B,KAAK,oBAAoB,EAEzB,KAAK,gBAAgB,EACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAOL,KAAK,iCAAiC,EACtC,KAAK,cAAc,EAEpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAoC9E,qBAAa,aAAa;IACxB,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,MAAM,wCAAU;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAQ;IACjC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IACnC,aAAa,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAMhD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAClC,SAAS,CAAC,gBAAgB,EAAE,iCAAiC,GAAG,IAAI,CAAQ;IAC5E,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,GAAG,IAAI,CAAQ;IACnE;;oDAEgD;IAChD,OAAO,CAAC,aAAa,CAA6B;IAClD;;oDAEgD;IAChD,OAAO,CAAC,2BAA2B,CAA6B;IAChE,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAA8B;IAC9D,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAQ;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;IAChC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAS;IACzC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAK;IACtC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAK;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IACrD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAM;IAC9C,8BAA8B,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1D,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAiC;IACtE,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAK;IAChC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;;;OAIG;IACH,SAAS,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAC/C;;;;OAIG;IACH,SAAS,CAAC,0BAA0B,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D;;;OAGG;IACH,SAAS,CAAC,oBAAoB,CAAC,EAAE,cAAc,CAC7C,IAAI,CAAC,qBAAqB,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,oBAAoB,CAAC,CACrH,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAM;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAO;IAC3D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAoB;IAC7D,OAAO,CAAC,gBAAgB,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAyB;IAChE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAA6B;IAC7D,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB,CAAS;gBAGlC,EACE,aAAa,EACb,UAAU,EACV,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,QAA0B,EAC1B,SAAS,EACT,KAAK,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,GACjB,EAAE;QACD,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,QAAQ,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7C;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;;;;;WAKG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,EACD,eAAe,CAAC,EAAE;QAChB,aAAa,CAAC,EAAE,oBAAoB,CAAC;QACrC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;QAChD,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7C;IAyCH;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,eAAe;IAsBxB,UAAU;IAIhB;;;OAGG;IACH,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9C;;;OAGG;YACW,+BAA+B;IAS7C;;;;;;;;;;OAUG;IACH,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,0BAA0B;IAiDlC;;OAEG;IACH,OAAO,CAAC,cAAc;IAKtB;;;;;;;;OAQG;IACH,OAAO,CAAC,2BAA2B;IAkCnC;;OAEG;cACa,0BAA0B;IAoD1C;;;;;;;OAOG;YACW,aAAa;IAmE3B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAsClC;;;;OAIG;YACW,wBAAwB;IAatC;;OAEG;YACW,uBAAuB;IAQrC;;OAEG;YACW,uBAAuB;IAOrC;;OAEG;YACW,0BAA0B;IAOxC;;OAEG;YACW,wBAAwB;IAQtC;;OAEG;YACW,aAAa;IAY3B;;OAEG;IACH,OAAO,CAAC,2BAA2B;YAkBrB,UAAU;IAiDxB,OAAO,CAAC,iCAAiC;IAgFzC,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAgG9B;;;;;;;;OAQG;IACG,mCAAmC,CAAC,EAAE,SAAS,EAAE,EAAE;QAAE,SAAS,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5F,MAAM,EAAE,iBAAiB,CAAC;QAC1B,aAAa,EAAE,oBAAoB,CAAC;QACpC,OAAO,EAAE,MAAM,IAAI,CAAC;KACrB,CAAC;IAqCF;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,8BAA8B;IA+CtC;;;;;;;;;;;OAWG;IACG,oCAAoC,CAAC,EAAE,gBAAgB,EAAE,EAAE;QAAE,gBAAgB,EAAE,gBAAgB,CAAA;KAAE,GAAG,OAAO,CAAC;QAChH,aAAa,EAAE,oBAAoB,CAAC;QACpC,OAAO,EAAE,MAAM,IAAI,CAAC;KACrB,CAAC;IAqCW,OAAO;CA4DrB"}