@dynamic-labs-wallet/browser 1.1.20 → 1.1.21

package/index.cjs

@@ -667,6 +667,12 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
    * retried. `alsoRetry` lets callers opt into additional retryable statuses
    * (e.g. 429 / 5xx) on top of the nonce refresh.
    */ refreshShouldRetry({ onRefreshed, operationName, logContext, alsoRetry }) {
+        // Per-operation state: a slow-but-succeeding attempt can consume the nonce
+        // after the client already moved on (e.g. a transient error on attempt 1
+        // triggered an `alsoRetry`), so the replay 400 can land on any attempt, not
+        // just the first. Refresh on the first such 400 seen, whichever attempt
+        // it's on, and never again — preserves the single-refresh-per-operation limit.
+        let hasRefreshed = false;
         return async (error, attempt)=>{
             const status = getHttpStatus(error);
             // A 400 is a refreshable replay nonce; a 401 is a session-key mismatch the
@@ -677,7 +683,7 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
             const isSessionSignatureFailure = status === 401 && SESSION_SIGNATURE_FAILURE_REASONS.has(classifyNonceFailure(readErrorBody(error)));
             const shouldInstrument = status === 400 || isSessionSignatureFailure;
             if (shouldInstrument) {
-                const willRefresh = status === 400 && attempt === 1 && this.canRefresh && this.supportsReverseChannel();
+                const willRefresh = status === 400 && !hasRefreshed && this.canRefresh && this.supportsReverseChannel();
                 this.instrumentNonceFailure({
                     error,
                     attempt,
@@ -687,7 +693,7 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
                     logContext
                 });
             }
-            if (status === 400 && attempt === 1 && this.canRefresh) {
+            if (status === 400 && !hasRefreshed && this.canRefresh) {
                 // canRefresh only proves a local callback exists, not that the host answers it.
                 if (!this.supportsReverseChannel()) {
                     this.logger.warn(`[${operationName}] host SDK version predates the signed-session reverse channel, declining nonce refresh`, _extends({
@@ -697,6 +703,7 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
                     }, logContext));
                     return alsoRetry ? alsoRetry(status) : false;
                 }
+                hasRefreshed = true;
                 onRefreshed(await this.resolve());
                 this.logger.info(`[${operationName}] refreshed signed session, retrying`, _extends({
                     http: {

package/index.esm.js

@@ -668,6 +668,12 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
    * retried. `alsoRetry` lets callers opt into additional retryable statuses
    * (e.g. 429 / 5xx) on top of the nonce refresh.
    */ refreshShouldRetry({ onRefreshed, operationName, logContext, alsoRetry }) {
+        // Per-operation state: a slow-but-succeeding attempt can consume the nonce
+        // after the client already moved on (e.g. a transient error on attempt 1
+        // triggered an `alsoRetry`), so the replay 400 can land on any attempt, not
+        // just the first. Refresh on the first such 400 seen, whichever attempt
+        // it's on, and never again — preserves the single-refresh-per-operation limit.
+        let hasRefreshed = false;
         return async (error, attempt)=>{
             const status = getHttpStatus(error);
             // A 400 is a refreshable replay nonce; a 401 is a session-key mismatch the
@@ -678,7 +684,7 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
             const isSessionSignatureFailure = status === 401 && SESSION_SIGNATURE_FAILURE_REASONS.has(classifyNonceFailure(readErrorBody(error)));
             const shouldInstrument = status === 400 || isSessionSignatureFailure;
             if (shouldInstrument) {
-                const willRefresh = status === 400 && attempt === 1 && this.canRefresh && this.supportsReverseChannel();
+                const willRefresh = status === 400 && !hasRefreshed && this.canRefresh && this.supportsReverseChannel();
                 this.instrumentNonceFailure({
                     error,
                     attempt,
@@ -688,7 +694,7 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
                     logContext
                 });
             }
-            if (status === 400 && attempt === 1 && this.canRefresh) {
+            if (status === 400 && !hasRefreshed && this.canRefresh) {
                 // canRefresh only proves a local callback exists, not that the host answers it.
                 if (!this.supportsReverseChannel()) {
                     this.logger.warn(`[${operationName}] host SDK version predates the signed-session reverse channel, declining nonce refresh`, _extends({
@@ -698,6 +704,7 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
                     }, logContext));
                     return alsoRetry ? alsoRetry(status) : false;
                 }
+                hasRefreshed = true;
                 onRefreshed(await this.resolve());
                 this.logger.info(`[${operationName}] refreshed signed session, retrying`, _extends({
                     http: {

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@dynamic-labs-wallet/browser",
-  "version": "1.1.20",
+  "version": "1.1.21",
   "license": "Licensed under the Dynamic Labs, Inc. Terms Of Service (https://www.dynamic.xyz/terms-conditions)",
   "type": "module",
   "dependencies": {
-    "@dynamic-labs-wallet/core": "1.1.20",
+    "@dynamic-labs-wallet/core": "1.1.21",
     "@dynamic-labs-wallet/forward-mpc-client": "2.0.2",
-    "@dynamic-labs-wallet/primitives": "1.1.20",
+    "@dynamic-labs-wallet/primitives": "1.1.21",
     "@dynamic-labs/sdk-api-core": "0.50.0",
     "@noble/curves": "1.8.0",
     "argon2id": "1.0.1",

package/src/services/signedSession.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signedSession.d.ts","sourceRoot":"","sources":["../../src/services/signedSession.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAIzD,gEAAgE;AAChE,KAAK,WAAW,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEnF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,sCAAsC,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAC1B,yBAAyB,GACzB,2BAA2B,GAC3B,oBAAoB,GACpB,OAAO,CAAC;AAkCZ,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,sBAAuB;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,KAAG,kBAoB7F,CAAC;AAEF;;;;;;;;;;GAUG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4C;IAGxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAU;gBAEtC,EACV,MAAM,EACN,UAAU,EACV,WAAW,GACZ,EAAE;QACD,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;KACxD;IAQD,+EAA+E;IAC/E,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;;OAGG;IACG,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAaxD,uEAAuE;IACvE,UAAU,IAAI,OAAO;IAIrB,2GAA2G;IAC3G,sBAAsB,IAAI,OAAO;IAIjC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EACjB,WAAW,EACX,aAAa,EACb,UAAU,EACV,SAAS,GACV,EAAE;QACD,WAAW,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,IAAI,CAAC;QAC/C,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;KACrD,GAAG,WAAW;IAoCf;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;CA+B/B"}
+{"version":3,"file":"signedSession.d.ts","sourceRoot":"","sources":["../../src/services/signedSession.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAIzD,gEAAgE;AAChE,KAAK,WAAW,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEnF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,sCAAsC,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAC1B,yBAAyB,GACzB,2BAA2B,GAC3B,oBAAoB,GACpB,OAAO,CAAC;AAkCZ,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,sBAAuB;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,KAAG,kBAoB7F,CAAC;AAEF;;;;;;;;;;GAUG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4C;IAGxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAU;gBAEtC,EACV,MAAM,EACN,UAAU,EACV,WAAW,GACZ,EAAE;QACD,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;KACxD;IAQD,+EAA+E;IAC/E,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;;OAGG;IACG,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAaxD,uEAAuE;IACvE,UAAU,IAAI,OAAO;IAIrB,2GAA2G;IAC3G,sBAAsB,IAAI,OAAO;IAIjC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EACjB,WAAW,EACX,aAAa,EACb,UAAU,EACV,SAAS,GACV,EAAE;QACD,WAAW,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,IAAI,CAAC;QAC/C,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;KACrD,GAAG,WAAW;IA2Cf;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;CA+B/B"}