@dynamic-labs-wallet/browser 1.0.59 → 1.0.60

package/index.cjs

@@ -2590,6 +2590,48 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
     }, logger);
 }
 
+/**
+ * Datadog event name emitted on every signed-session nonce rejection (a 400
+ * from the backup/recovery endpoints). Log-only: lets us split the failure
+ * bucket by `reason` and measure the true per-wallet unrecoverable rate
+ * without changing any retry behavior. See DYNT-1599.
+ */ const NONCE_FAILURE_EVENT = 'waas.signed_session.nonce_failure';
+/** Best-effort extraction of the server error `code`/`message` from a 400 body. */ const readErrorBody = (error)=>{
+    var _error_response;
+    if (!(error instanceof axios.AxiosError)) {
+        return {};
+    }
+    const data = (_error_response = error.response) == null ? void 0 : _error_response.data;
+    if (typeof data === 'string') {
+        return {
+            message: data
+        };
+    }
+    if (!data || typeof data !== 'object') {
+        return {};
+    }
+    const record = data;
+    // Prefer a string `code`, else fall back to a string `error`.
+    const code = [
+        record['code'],
+        record['error']
+    ].find((value)=>typeof value === 'string');
+    const message = typeof record['message'] === 'string' ? record['message'] : undefined;
+    return {
+        code,
+        message
+    };
+};
+/** Maps the server error `code`/`message` onto a {@link NonceFailureReason}. */ const classifyNonceFailure = ({ code, message })=>{
+    const haystack = `${code != null ? code : ''} ${message != null ? message : ''}`.toLowerCase();
+    if (haystack.includes('already_used') || haystack.includes('already used') || haystack.includes('consumption failed')) {
+        return 'nonce_already_used';
+    }
+    if (haystack.includes('invalid_nonce_signature') || haystack.includes('invalid nonce signature')) {
+        return 'invalid_nonce_signature';
+    }
+    return 'other';
+};
 /**
  * Owns everything about signed sessions and their single-use replay nonces:
  * resolving a session from an explicit value or the host reverse channel,
@@ -2632,26 +2674,57 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
    */ refreshShouldRetry({ onRefreshed, operationName, logContext, alsoRetry }) {
         return async (error, attempt)=>{
             const status = getHttpStatus(error);
-            if (status === 400 && attempt === 1 && this.canRefresh) {
-                // canRefresh only proves a local callback exists, not that the host answers it.
-                if (!this.supportsReverseChannel()) {
-                    this.logger.warn(`[${operationName}] host SDK version predates the signed-session reverse channel, declining nonce refresh`, _extends({
+            if (status === 400) {
+                const willRefresh = attempt === 1 && this.canRefresh && this.supportsReverseChannel();
+                this.instrumentNonceFailure({
+                    error,
+                    attempt,
+                    operationName,
+                    willRefresh,
+                    logContext
+                });
+                if (attempt === 1 && this.canRefresh) {
+                    // canRefresh only proves a local callback exists, not that the host answers it.
+                    if (!this.supportsReverseChannel()) {
+                        this.logger.warn(`[${operationName}] host SDK version predates the signed-session reverse channel, declining nonce refresh`, _extends({
+                            status
+                        }, logContext));
+                        return alsoRetry ? alsoRetry(status) : false;
+                    }
+                    onRefreshed(await this.resolve());
+                    this.logger.info(`[${operationName}] refreshed signed session, retrying`, _extends({
                         status
                     }, logContext));
-                    return alsoRetry ? alsoRetry(status) : false;
+                    return true;
                 }
-                onRefreshed(await this.resolve());
-                this.logger.info(`[${operationName}] refreshed signed session, retrying`, _extends({
-                    status
-                }, logContext));
-                return true;
             }
             return alsoRetry ? alsoRetry(status) : false;
         };
     }
+    /**
+   * Emits a single Datadog log per signed-session nonce rejection so the
+   * failure bucket can be split by `reason` and correlated per wallet/request.
+   * Purely observational — it never alters the retry decision.
+   */ instrumentNonceFailure({ error, attempt, operationName, willRefresh, logContext }) {
+        const body = readErrorBody(error);
+        this.logger.info(NONCE_FAILURE_EVENT, _extends({}, logContext, {
+            operationName,
+            attempt,
+            status: 400,
+            reason: classifyNonceFailure(body),
+            errorCode: body.code,
+            errorMessage: body.message,
+            willRefresh,
+            canRefresh: this.canRefresh,
+            reverseChannelSupported: this.reverseChannelSupported,
+            required: this.required,
+            sdkVersion: this.sdkVersion
+        }));
+    }
     constructor({ logger, sdkVersion, getCallback }){
         this.logger = logger;
         this.getCallback = getCallback;
+        this.sdkVersion = sdkVersion;
         this.required = isRequiresSignedSessionId(sdkVersion, this.logger);
         this.reverseChannelSupported = isReverseChannelSupported(sdkVersion, this.logger);
     }
@@ -6368,7 +6441,9 @@ class DynamicWalletClient {
                         },
                         operationName,
                         logContext: {
-                            dynamicRequestId
+                            dynamicRequestId,
+                            walletId: walletData.walletId,
+                            sessionPublicKey
                         },
                         alsoRetry: (status)=>status === undefined || status === 429 || status !== undefined && status >= 500
                     })

package/index.esm.js

@@ -2591,6 +2591,48 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
     }, logger);
 }
 
+/**
+ * Datadog event name emitted on every signed-session nonce rejection (a 400
+ * from the backup/recovery endpoints). Log-only: lets us split the failure
+ * bucket by `reason` and measure the true per-wallet unrecoverable rate
+ * without changing any retry behavior. See DYNT-1599.
+ */ const NONCE_FAILURE_EVENT = 'waas.signed_session.nonce_failure';
+/** Best-effort extraction of the server error `code`/`message` from a 400 body. */ const readErrorBody = (error)=>{
+    var _error_response;
+    if (!(error instanceof AxiosError)) {
+        return {};
+    }
+    const data = (_error_response = error.response) == null ? void 0 : _error_response.data;
+    if (typeof data === 'string') {
+        return {
+            message: data
+        };
+    }
+    if (!data || typeof data !== 'object') {
+        return {};
+    }
+    const record = data;
+    // Prefer a string `code`, else fall back to a string `error`.
+    const code = [
+        record['code'],
+        record['error']
+    ].find((value)=>typeof value === 'string');
+    const message = typeof record['message'] === 'string' ? record['message'] : undefined;
+    return {
+        code,
+        message
+    };
+};
+/** Maps the server error `code`/`message` onto a {@link NonceFailureReason}. */ const classifyNonceFailure = ({ code, message })=>{
+    const haystack = `${code != null ? code : ''} ${message != null ? message : ''}`.toLowerCase();
+    if (haystack.includes('already_used') || haystack.includes('already used') || haystack.includes('consumption failed')) {
+        return 'nonce_already_used';
+    }
+    if (haystack.includes('invalid_nonce_signature') || haystack.includes('invalid nonce signature')) {
+        return 'invalid_nonce_signature';
+    }
+    return 'other';
+};
 /**
  * Owns everything about signed sessions and their single-use replay nonces:
  * resolving a session from an explicit value or the host reverse channel,
@@ -2633,26 +2675,57 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
    */ refreshShouldRetry({ onRefreshed, operationName, logContext, alsoRetry }) {
         return async (error, attempt)=>{
             const status = getHttpStatus(error);
-            if (status === 400 && attempt === 1 && this.canRefresh) {
-                // canRefresh only proves a local callback exists, not that the host answers it.
-                if (!this.supportsReverseChannel()) {
-                    this.logger.warn(`[${operationName}] host SDK version predates the signed-session reverse channel, declining nonce refresh`, _extends({
+            if (status === 400) {
+                const willRefresh = attempt === 1 && this.canRefresh && this.supportsReverseChannel();
+                this.instrumentNonceFailure({
+                    error,
+                    attempt,
+                    operationName,
+                    willRefresh,
+                    logContext
+                });
+                if (attempt === 1 && this.canRefresh) {
+                    // canRefresh only proves a local callback exists, not that the host answers it.
+                    if (!this.supportsReverseChannel()) {
+                        this.logger.warn(`[${operationName}] host SDK version predates the signed-session reverse channel, declining nonce refresh`, _extends({
+                            status
+                        }, logContext));
+                        return alsoRetry ? alsoRetry(status) : false;
+                    }
+                    onRefreshed(await this.resolve());
+                    this.logger.info(`[${operationName}] refreshed signed session, retrying`, _extends({
                         status
                     }, logContext));
-                    return alsoRetry ? alsoRetry(status) : false;
+                    return true;
                 }
-                onRefreshed(await this.resolve());
-                this.logger.info(`[${operationName}] refreshed signed session, retrying`, _extends({
-                    status
-                }, logContext));
-                return true;
             }
             return alsoRetry ? alsoRetry(status) : false;
         };
     }
+    /**
+   * Emits a single Datadog log per signed-session nonce rejection so the
+   * failure bucket can be split by `reason` and correlated per wallet/request.
+   * Purely observational — it never alters the retry decision.
+   */ instrumentNonceFailure({ error, attempt, operationName, willRefresh, logContext }) {
+        const body = readErrorBody(error);
+        this.logger.info(NONCE_FAILURE_EVENT, _extends({}, logContext, {
+            operationName,
+            attempt,
+            status: 400,
+            reason: classifyNonceFailure(body),
+            errorCode: body.code,
+            errorMessage: body.message,
+            willRefresh,
+            canRefresh: this.canRefresh,
+            reverseChannelSupported: this.reverseChannelSupported,
+            required: this.required,
+            sdkVersion: this.sdkVersion
+        }));
+    }
     constructor({ logger, sdkVersion, getCallback }){
         this.logger = logger;
         this.getCallback = getCallback;
+        this.sdkVersion = sdkVersion;
         this.required = isRequiresSignedSessionId(sdkVersion, this.logger);
         this.reverseChannelSupported = isReverseChannelSupported(sdkVersion, this.logger);
     }
@@ -6369,7 +6442,9 @@ class DynamicWalletClient {
                         },
                         operationName,
                         logContext: {
-                            dynamicRequestId
+                            dynamicRequestId,
+                            walletId: walletData.walletId,
+                            sessionPublicKey
                         },
                         alsoRetry: (status)=>status === undefined || status === 429 || status !== undefined && status >= 500
                     })

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@dynamic-labs-wallet/browser",
-  "version": "1.0.59",
+  "version": "1.0.60",
   "license": "Licensed under the Dynamic Labs, Inc. Terms Of Service (https://www.dynamic.xyz/terms-conditions)",
   "type": "module",
   "dependencies": {
-    "@dynamic-labs-wallet/core": "1.0.59",
+    "@dynamic-labs-wallet/core": "1.0.60",
     "@dynamic-labs-wallet/forward-mpc-client": "1.0.1",
-    "@dynamic-labs-wallet/primitives": "1.0.59",
+    "@dynamic-labs-wallet/primitives": "1.0.60",
     "@dynamic-labs/sdk-api-core": "^0.0.984",
     "argon2id": "1.0.1",
     "axios": "1.16.0",

package/src/services/signedSession.d.ts

@@ -1,6 +1,25 @@
 import type { ILogger } from '@dynamic-labs-wallet/core';
 /** Predicate matching `retryPromise`'s `shouldRetry` option. */
 type ShouldRetry = (error: unknown, attempt: number) => boolean | Promise<boolean>;
+/**
+ * Datadog event name emitted on every signed-session nonce rejection (a 400
+ * from the backup/recovery endpoints). Log-only: lets us split the failure
+ * bucket by `reason` and measure the true per-wallet unrecoverable rate
+ * without changing any retry behavior. See DYNT-1599.
+ */
+export declare const NONCE_FAILURE_EVENT = "waas.signed_session.nonce_failure";
+/**
+ * Coarse cause of a signed-session nonce rejection. `invalid_nonce_signature`
+ * (a bad/stale signing key) cannot be fixed by refreshing the nonce, whereas
+ * `nonce_already_used` (a consumed replay nonce) can — so splitting them tells
+ * us whether the refresh-and-retry path can actually help.
+ */
+export type NonceFailureReason = 'invalid_nonce_signature' | 'nonce_already_used' | 'other';
+/** Maps the server error `code`/`message` onto a {@link NonceFailureReason}. */
+export declare const classifyNonceFailure: ({ code, message }: {
+    code?: string;
+    message?: string;
+}) => NonceFailureReason;
 /**
  * Owns everything about signed sessions and their single-use replay nonces:
  * resolving a session from an explicit value or the host reverse channel,
@@ -15,6 +34,7 @@ type ShouldRetry = (error: unknown, attempt: number) => boolean | Promise<boolea
 export declare class SignedSessionManager {
     private readonly logger;
     private readonly getCallback;
+    private readonly sdkVersion?;
     private readonly required;
     private readonly reverseChannelSupported;
     constructor({ logger, sdkVersion, getCallback, }: {
@@ -48,6 +68,12 @@ export declare class SignedSessionManager {
         logContext?: Record<string, unknown>;
         alsoRetry?: (status: number | undefined) => boolean;
     }): ShouldRetry;
+    /**
+     * Emits a single Datadog log per signed-session nonce rejection so the
+     * failure bucket can be split by `reason` and correlated per wallet/request.
+     * Purely observational — it never alters the retry decision.
+     */
+    private instrumentNonceFailure;
 }
 export {};
 //# sourceMappingURL=signedSession.d.ts.map

package/src/services/signedSession.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signedSession.d.ts","sourceRoot":"","sources":["../../src/services/signedSession.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAIzD,gEAAgE;AAChE,KAAK,WAAW,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEnF;;;;;;;;;;GAUG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4C;IAGxE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAU;gBAEtC,EACV,MAAM,EACN,UAAU,EACV,WAAW,GACZ,EAAE;QACD,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;KACxD;IAOD,+EAA+E;IAC/E,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;;OAGG;IACG,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAaxD,uEAAuE;IACvE,UAAU,IAAI,OAAO;IAIrB,2GAA2G;IAC3G,sBAAsB,IAAI,OAAO;IAIjC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EACjB,WAAW,EACX,aAAa,EACb,UAAU,EACV,SAAS,GACV,EAAE;QACD,WAAW,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,IAAI,CAAC;QAC/C,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;KACrD,GAAG,WAAW;CAmBhB"}
+{"version":3,"file":"signedSession.d.ts","sourceRoot":"","sources":["../../src/services/signedSession.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAIzD,gEAAgE;AAChE,KAAK,WAAW,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEnF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,sCAAsC,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,GAAG,oBAAoB,GAAG,OAAO,CAAC;AAqB5F,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,sBAAuB;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,KAAG,kBAa7F,CAAC;AAEF;;;;;;;;;;GAUG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4C;IAGxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAU;gBAEtC,EACV,MAAM,EACN,UAAU,EACV,WAAW,GACZ,EAAE;QACD,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;KACxD;IAQD,+EAA+E;IAC/E,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;;OAGG;IACG,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAaxD,uEAAuE;IACvE,UAAU,IAAI,OAAO;IAIrB,2GAA2G;IAC3G,sBAAsB,IAAI,OAAO;IAIjC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EACjB,WAAW,EACX,aAAa,EACb,UAAU,EACV,SAAS,GACV,EAAE;QACD,WAAW,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,IAAI,CAAC;QAC/C,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;KACrD,GAAG,WAAW;IAyBf;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;CA6B/B"}