@dynamic-labs/sdk-react-core 4.92.0 → 4.92.2

package/src/lib/utils/hooks/authenticationHooks/useOtpVerificationRequest/useOtpVerificationRequest.cjs

@@ -90,11 +90,11 @@ require('../../useWalletBackup/useWalletBackup.cjs');
 require('../../useWalletBackup/BackupError.cjs');
 require('../../useWalletBackup/types.cjs');
 require('../../useWalletBackup/cloudProviders.cjs');
+require('@hcaptcha/react-hcaptcha');
+require('@marsidev/react-turnstile');
 require('../../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
 require('../../../../context/ConnectWithOtpContext/ConnectWithOtpContext.cjs');
 require('../../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
-require('@hcaptcha/react-hcaptcha');
-require('@marsidev/react-turnstile');
 require('../../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.cjs');
 require('../../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.cjs');
 require('../../../../context/ErrorContext/hooks/useErrorText/useErrorText.cjs');

package/src/lib/utils/hooks/authenticationHooks/useOtpVerificationRequest/useOtpVerificationRequest.js

@@ -86,11 +86,11 @@ import '../../useWalletBackup/useWalletBackup.js';
 import '../../useWalletBackup/BackupError.js';
 import '../../useWalletBackup/types.js';
 import '../../useWalletBackup/cloudProviders.js';
+import '@hcaptcha/react-hcaptcha';
+import '@marsidev/react-turnstile';
 import '../../../../context/IpConfigurationContext/IpConfigurationContext.js';
 import '../../../../context/ConnectWithOtpContext/ConnectWithOtpContext.js';
 import '../../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
-import '@hcaptcha/react-hcaptcha';
-import '@marsidev/react-turnstile';
 import '../../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.js';
 import '../../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.js';
 import '../../../../context/ErrorContext/hooks/useErrorText/useErrorText.js';

package/src/lib/utils/hooks/multiWallet/useVerifyOnAwaitingSignature/useVerifyOnAwaitingSignature.cjs

@@ -88,11 +88,11 @@ require('../../useWalletBackup/useWalletBackup.cjs');
 require('../../useWalletBackup/BackupError.cjs');
 require('../../useWalletBackup/types.cjs');
 require('../../useWalletBackup/cloudProviders.cjs');
+require('@hcaptcha/react-hcaptcha');
+require('@marsidev/react-turnstile');
 require('../../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
 require('../../../../context/ConnectWithOtpContext/ConnectWithOtpContext.cjs');
 require('../../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
-require('@hcaptcha/react-hcaptcha');
-require('@marsidev/react-turnstile');
 require('../../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.cjs');
 require('../../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.cjs');
 require('../../../../context/ErrorContext/hooks/useErrorText/useErrorText.cjs');

package/src/lib/utils/hooks/multiWallet/useVerifyOnAwaitingSignature/useVerifyOnAwaitingSignature.js

@@ -84,11 +84,11 @@ import '../../useWalletBackup/useWalletBackup.js';
 import '../../useWalletBackup/BackupError.js';
 import '../../useWalletBackup/types.js';
 import '../../useWalletBackup/cloudProviders.js';
+import '@hcaptcha/react-hcaptcha';
+import '@marsidev/react-turnstile';
 import '../../../../context/IpConfigurationContext/IpConfigurationContext.js';
 import '../../../../context/ConnectWithOtpContext/ConnectWithOtpContext.js';
 import '../../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
-import '@hcaptcha/react-hcaptcha';
-import '@marsidev/react-turnstile';
 import '../../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.js';
 import '../../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.js';
 import '../../../../context/ErrorContext/hooks/useErrorText/useErrorText.js';

package/src/lib/utils/hooks/useAuthenticateConnectedUser/useAuthenticateConnectedUser.cjs

@@ -85,11 +85,11 @@ require('../useWalletBackup/useWalletBackup.cjs');
 require('../useWalletBackup/BackupError.cjs');
 require('../useWalletBackup/types.cjs');
 require('../useWalletBackup/cloudProviders.cjs');
+require('@hcaptcha/react-hcaptcha');
+require('@marsidev/react-turnstile');
 require('../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
 require('../../../context/ConnectWithOtpContext/ConnectWithOtpContext.cjs');
 require('../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
-require('@hcaptcha/react-hcaptcha');
-require('@marsidev/react-turnstile');
 require('../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.cjs');
 require('../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.cjs');
 require('../../../context/ErrorContext/hooks/useErrorText/useErrorText.cjs');

package/src/lib/utils/hooks/useAuthenticateConnectedUser/useAuthenticateConnectedUser.js

@@ -81,11 +81,11 @@ import '../useWalletBackup/useWalletBackup.js';
 import '../useWalletBackup/BackupError.js';
 import '../useWalletBackup/types.js';
 import '../useWalletBackup/cloudProviders.js';
+import '@hcaptcha/react-hcaptcha';
+import '@marsidev/react-turnstile';
 import '../../../context/IpConfigurationContext/IpConfigurationContext.js';
 import '../../../context/ConnectWithOtpContext/ConnectWithOtpContext.js';
 import '../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
-import '@hcaptcha/react-hcaptcha';
-import '@marsidev/react-turnstile';
 import '../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.js';
 import '../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.js';
 import '../../../context/ErrorContext/hooks/useErrorText/useErrorText.js';

package/src/lib/utils/hooks/useDynamicModals/useDynamicModals.cjs

@@ -87,11 +87,11 @@ require('../useWalletBackup/useWalletBackup.cjs');
 require('../useWalletBackup/BackupError.cjs');
 require('../useWalletBackup/types.cjs');
 require('../useWalletBackup/cloudProviders.cjs');
+require('@hcaptcha/react-hcaptcha');
+require('@marsidev/react-turnstile');
 require('../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
 require('../../../context/ConnectWithOtpContext/ConnectWithOtpContext.cjs');
 require('../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
-require('@hcaptcha/react-hcaptcha');
-require('@marsidev/react-turnstile');
 require('../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.cjs');
 require('../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.cjs');
 require('../../../context/ErrorContext/hooks/useErrorText/useErrorText.cjs');

package/src/lib/utils/hooks/useDynamicModals/useDynamicModals.js

@@ -83,11 +83,11 @@ import '../useWalletBackup/useWalletBackup.js';
 import '../useWalletBackup/BackupError.js';
 import '../useWalletBackup/types.js';
 import '../useWalletBackup/cloudProviders.js';
+import '@hcaptcha/react-hcaptcha';
+import '@marsidev/react-turnstile';
 import '../../../context/IpConfigurationContext/IpConfigurationContext.js';
 import '../../../context/ConnectWithOtpContext/ConnectWithOtpContext.js';
 import '../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
-import '@hcaptcha/react-hcaptcha';
-import '@marsidev/react-turnstile';
 import '../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.js';
 import '../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.js';
 import '../../../context/ErrorContext/hooks/useErrorText/useErrorText.js';

package/src/lib/utils/hooks/useEmailProvider/useEmailProvider.cjs

@@ -87,10 +87,10 @@ require('../useWalletBackup/useWalletBackup.cjs');
 require('../useWalletBackup/BackupError.cjs');
 require('../useWalletBackup/types.cjs');
 require('../useWalletBackup/cloudProviders.cjs');
-require('../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
-require('../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
 require('@hcaptcha/react-hcaptcha');
 require('@marsidev/react-turnstile');
+require('../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
+require('../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
 require('../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.cjs');
 require('../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.cjs');
 require('../../../context/ErrorContext/hooks/useErrorText/useErrorText.cjs');

package/src/lib/utils/hooks/useEmailProvider/useEmailProvider.js

@@ -83,10 +83,10 @@ import '../useWalletBackup/useWalletBackup.js';
 import '../useWalletBackup/BackupError.js';
 import '../useWalletBackup/types.js';
 import '../useWalletBackup/cloudProviders.js';
-import '../../../context/IpConfigurationContext/IpConfigurationContext.js';
-import '../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
 import '@hcaptcha/react-hcaptcha';
 import '@marsidev/react-turnstile';
+import '../../../context/IpConfigurationContext/IpConfigurationContext.js';
+import '../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
 import '../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.js';
 import '../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.js';
 import '../../../context/ErrorContext/hooks/useErrorText/useErrorText.js';

package/src/lib/utils/hooks/useNetworkNotSupported/useNetworkNotSupported.cjs

@@ -87,11 +87,11 @@ require('../useWalletBackup/useWalletBackup.cjs');
 require('../useWalletBackup/BackupError.cjs');
 require('../useWalletBackup/types.cjs');
 require('../useWalletBackup/cloudProviders.cjs');
+require('@hcaptcha/react-hcaptcha');
+require('@marsidev/react-turnstile');
 require('../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
 require('../../../context/ConnectWithOtpContext/ConnectWithOtpContext.cjs');
 require('../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
-require('@hcaptcha/react-hcaptcha');
-require('@marsidev/react-turnstile');
 require('../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.cjs');
 require('../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.cjs');
 require('../../../context/ErrorContext/hooks/useErrorText/useErrorText.cjs');

package/src/lib/utils/hooks/useNetworkNotSupported/useNetworkNotSupported.js

@@ -83,11 +83,11 @@ import '../useWalletBackup/useWalletBackup.js';
 import '../useWalletBackup/BackupError.js';
 import '../useWalletBackup/types.js';
 import '../useWalletBackup/cloudProviders.js';
+import '@hcaptcha/react-hcaptcha';
+import '@marsidev/react-turnstile';
 import '../../../context/IpConfigurationContext/IpConfigurationContext.js';
 import '../../../context/ConnectWithOtpContext/ConnectWithOtpContext.js';
 import '../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
-import '@hcaptcha/react-hcaptcha';
-import '@marsidev/react-turnstile';
 import '../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.js';
 import '../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.js';
 import '../../../context/ErrorContext/hooks/useErrorText/useErrorText.js';

package/src/lib/utils/hooks/useSetWalletConnectorFetchers/useSetWalletConnectorFetchers.cjs

@@ -90,11 +90,11 @@ require('../useWalletBackup/useWalletBackup.cjs');
 require('../useWalletBackup/BackupError.cjs');
 require('../useWalletBackup/types.cjs');
 require('../useWalletBackup/cloudProviders.cjs');
+require('@hcaptcha/react-hcaptcha');
+require('@marsidev/react-turnstile');
 require('../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
 require('../../../context/ConnectWithOtpContext/ConnectWithOtpContext.cjs');
 require('../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
-require('@hcaptcha/react-hcaptcha');
-require('@marsidev/react-turnstile');
 require('../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.cjs');
 require('../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.cjs');
 require('../../../context/ErrorContext/hooks/useErrorText/useErrorText.cjs');

package/src/lib/utils/hooks/useSetWalletConnectorFetchers/useSetWalletConnectorFetchers.js

@@ -86,11 +86,11 @@ import '../useWalletBackup/useWalletBackup.js';
 import '../useWalletBackup/BackupError.js';
 import '../useWalletBackup/types.js';
 import '../useWalletBackup/cloudProviders.js';
+import '@hcaptcha/react-hcaptcha';
+import '@marsidev/react-turnstile';
 import '../../../context/IpConfigurationContext/IpConfigurationContext.js';
 import '../../../context/ConnectWithOtpContext/ConnectWithOtpContext.js';
 import '../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
-import '@hcaptcha/react-hcaptcha';
-import '@marsidev/react-turnstile';
 import '../../../widgets/DynamicWidget/helpers/convertExchangeKeyAndProviderEnum.js';
 import '../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.js';
 import '../../../context/ErrorContext/hooks/useErrorText/useErrorText.js';

package/src/lib/utils/hooks/useSocialAuth/useSocialAuth.cjs

@@ -394,7 +394,13 @@ const useSocialAuth = ({ onSettled, onError, onFarcasterUrl, }) => {
         }
         const isMobile = utils.isMobile();
         try {
-            const effectiveStrategy = authMode === 'stepup' || forcePopup ? 'popup' : strategy;
+            // Step-up normally forces a popup, but on mobile browsers popups
+            // opened after an async gap (e.g. captcha verification) lose user
+            // activation and are blocked (notably iOS Safari). Fall back to the
+            // configured strategy (redirect) on mobile so the flow can resume.
+            const effectiveStrategy = (authMode === 'stepup' && !isMobile) || forcePopup
+                ? 'popup'
+                : strategy;
             const authCode = yield utils.Oauth2Service.getOauthCode({
                 apiProvider: getProviderByType.getProviderByType((_k = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.providers) !== null && _k !== void 0 ? _k : [], provider),
                 getOAuthResultFromApi: () => oauth.getOAuthResult(environmentId, provider, {

package/src/lib/utils/hooks/useSocialAuth/useSocialAuth.js

@@ -390,7 +390,13 @@ const useSocialAuth = ({ onSettled, onError, onFarcasterUrl, }) => {
         }
         const isMobile$1 = isMobile();
         try {
-            const effectiveStrategy = authMode === 'stepup' || forcePopup ? 'popup' : strategy;
+            // Step-up normally forces a popup, but on mobile browsers popups
+            // opened after an async gap (e.g. captcha verification) lose user
+            // activation and are blocked (notably iOS Safari). Fall back to the
+            // configured strategy (redirect) on mobile so the flow can resume.
+            const effectiveStrategy = (authMode === 'stepup' && !isMobile$1) || forcePopup
+                ? 'popup'
+                : strategy;
             const authCode = yield Oauth2Service.getOauthCode({
                 apiProvider: getProviderByType((_k = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.providers) !== null && _k !== void 0 ? _k : [], provider),
                 getOAuthResultFromApi: () => getOAuthResult(environmentId, provider, {

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpAuthentication.cjs

@@ -34,11 +34,18 @@ var usePromptStepUpAuth = require('./usePromptStepUpAuth.cjs');
  *   wallet to use. For OTP, must be an email or SMS credential. Defaults to the
  *   first sign-in enabled email or SMS credential on the authenticated user.
  *
+ * When captcha is enabled for the environment, `sendOtp()` does not send
+ * immediately: it sets `state.captchaRequired` to `true` and returns `null`.
+ * The UI must collect a captcha token and call `submitCaptchaToken(token)`,
+ * which supplies the token to the headless client and completes the send.
+ *
  * @example
  * ```tsx
  * // OTP flow
- * const { sendOtp, verifyOtp } = useStepUpAuthentication();
+ * const { sendOtp, submitCaptchaToken, verifyOtp, state } = useStepUpAuthentication();
  * await sendOtp();
+ * // if captcha is required, state.captchaRequired is true — after solving it:
+ * if (state.captchaRequired) await submitCaptchaToken(captchaToken);
  * const result = await verifyOtp({ verificationToken: '123456', requestedScopes: ['wallet:export'] });
  *
  * // Passkey MFA flow
@@ -52,7 +59,7 @@ var usePromptStepUpAuth = require('./usePromptStepUpAuth.cjs');
  */
 const useStepUpAuthentication = ({ credentialId, } = {}) => {
     const stateActions = useStepUpState.useStepUpState();
-    const { resetOtpRef, sendOtp, verifyOtp } = useStepUpOtp.useStepUpOtp({
+    const { resetOtpRef, sendOtp, submitCaptchaToken, verifyOtp } = useStepUpOtp.useStepUpOtp({
         credentialId,
         stateActions,
     });
@@ -91,6 +98,7 @@ const useStepUpAuthentication = ({ credentialId, } = {}) => {
         resetState,
         sendOtp,
         state: stateActions.state,
+        submitCaptchaToken,
         verifyOtp,
         verifyPasskeyMfa,
         verifyRecoveryCode,

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpAuthentication.d.ts

@@ -18,11 +18,18 @@ import type { UseStepUpAuthenticationParams, UseStepUpAuthenticationReturn } fro
  *   wallet to use. For OTP, must be an email or SMS credential. Defaults to the
  *   first sign-in enabled email or SMS credential on the authenticated user.
  *
+ * When captcha is enabled for the environment, `sendOtp()` does not send
+ * immediately: it sets `state.captchaRequired` to `true` and returns `null`.
+ * The UI must collect a captcha token and call `submitCaptchaToken(token)`,
+ * which supplies the token to the headless client and completes the send.
+ *
  * @example
  * ```tsx
  * // OTP flow
- * const { sendOtp, verifyOtp } = useStepUpAuthentication();
+ * const { sendOtp, submitCaptchaToken, verifyOtp, state } = useStepUpAuthentication();
  * await sendOtp();
+ * // if captcha is required, state.captchaRequired is true — after solving it:
+ * if (state.captchaRequired) await submitCaptchaToken(captchaToken);
  * const result = await verifyOtp({ verificationToken: '123456', requestedScopes: ['wallet:export'] });
  *
  * // Passkey MFA flow

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpAuthentication.js

@@ -30,11 +30,18 @@ import { usePromptStepUpAuth } from './usePromptStepUpAuth.js';
  *   wallet to use. For OTP, must be an email or SMS credential. Defaults to the
  *   first sign-in enabled email or SMS credential on the authenticated user.
  *
+ * When captcha is enabled for the environment, `sendOtp()` does not send
+ * immediately: it sets `state.captchaRequired` to `true` and returns `null`.
+ * The UI must collect a captcha token and call `submitCaptchaToken(token)`,
+ * which supplies the token to the headless client and completes the send.
+ *
  * @example
  * ```tsx
  * // OTP flow
- * const { sendOtp, verifyOtp } = useStepUpAuthentication();
+ * const { sendOtp, submitCaptchaToken, verifyOtp, state } = useStepUpAuthentication();
  * await sendOtp();
+ * // if captcha is required, state.captchaRequired is true — after solving it:
+ * if (state.captchaRequired) await submitCaptchaToken(captchaToken);
  * const result = await verifyOtp({ verificationToken: '123456', requestedScopes: ['wallet:export'] });
  *
  * // Passkey MFA flow
@@ -48,7 +55,7 @@ import { usePromptStepUpAuth } from './usePromptStepUpAuth.js';
  */
 const useStepUpAuthentication = ({ credentialId, } = {}) => {
     const stateActions = useStepUpState();
-    const { resetOtpRef, sendOtp, verifyOtp } = useStepUpOtp({
+    const { resetOtpRef, sendOtp, submitCaptchaToken, verifyOtp } = useStepUpOtp({
         credentialId,
         stateActions,
     });
@@ -87,6 +94,7 @@ const useStepUpAuthentication = ({ credentialId, } = {}) => {
         resetState,
         sendOtp,
         state: stateActions.state,
+        submitCaptchaToken,
         verifyOtp,
         verifyPasskeyMfa,
         verifyRecoveryCode,

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpAuthentication.types.d.ts

@@ -1,6 +1,7 @@
 import type { checkStepUpAuth, OTPVerification } from '@dynamic-labs-sdk/client';
 import type { ProviderEnum, TokenScope, VerifyResponse } from '@dynamic-labs/sdk-api-core';
 export type StepUpAuthenticationState = {
+    captchaRequired: boolean;
     error: string | null;
     isLoading: boolean;
     otpVerification: OTPVerification | null;
@@ -59,6 +60,7 @@ export type UseStepUpAuthenticationReturn = {
     resetState: () => void;
     sendOtp: (params?: SendOtpParams) => Promise<OTPVerification | null>;
     state: StepUpAuthenticationState;
+    submitCaptchaToken: (captchaToken: string) => Promise<OTPVerification | null>;
     verifyOtp: (params: VerifyOtpParams) => Promise<VerifyResponse | null>;
     verifyPasskeyMfa: (params: VerifyPasskeyMfaParams) => Promise<VerifyResponse | null>;
     verifyRecoveryCode: (params: VerifyRecoveryCodeParams) => Promise<VerifyResponse | null>;

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpOtp.cjs

@@ -67,8 +67,24 @@ const dispatchOtp = (credential) => _tslib.__awaiter(void 0, void 0, void 0, fun
 });
 const useStepUpOtp = ({ credentialId, stateActions, }) => {
     const user = useUser.useUser();
-    const { setError, setLoading, setSuccess } = stateActions;
+    const { setError, setLoading, setState, setSuccess } = stateActions;
     const otpVerificationRef = React.useRef(null);
+    // Holds the credential whose OTP send is blocked awaiting a captcha token.
+    const pendingCaptchaCredentialRef = React.useRef(null);
+    const dispatchAndStoreOtp = React.useCallback((credential) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        setLoading();
+        try {
+            const otpVerification = yield dispatchOtp(credential);
+            otpVerificationRef.current = otpVerification;
+            setSuccess({ otpVerification });
+            return otpVerification;
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : 'Failed to send OTP';
+            setError(errorMessage);
+            return null;
+        }
+    }), [setError, setLoading, setSuccess]);
     const sendOtp = React.useCallback((params) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
         var _a;
         const credentials = user === null || user === void 0 ? void 0 : user.verifiedCredentials;
@@ -86,19 +102,32 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
             setError(`Credential format "${result.format}" does not support OTP verification. Only email and SMS credentials are supported`);
             return null;
         }
-        setLoading();
-        try {
-            const otpVerification = yield dispatchOtp(result);
-            otpVerificationRef.current = otpVerification;
-            setSuccess({ otpVerification });
-            return otpVerification;
+        // The headless client consumes a captcha token when sending an OTP for
+        // captcha-enabled environments. Defer the send and surface the challenge
+        // to the UI, which collects a token and completes it via submitCaptchaToken.
+        if (client.isCaptchaRequired()) {
+            pendingCaptchaCredentialRef.current = result;
+            setState((prev) => (Object.assign(Object.assign({}, prev), { captchaRequired: true, error: null })));
+            return null;
         }
-        catch (error) {
-            const errorMessage = error instanceof Error ? error.message : 'Failed to send OTP';
-            setError(errorMessage);
+        return dispatchAndStoreOtp(result);
+    }), [
+        credentialId,
+        dispatchAndStoreOtp,
+        setError,
+        setState,
+        user === null || user === void 0 ? void 0 : user.verifiedCredentials,
+    ]);
+    const submitCaptchaToken = React.useCallback((captchaToken) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        const credential = pendingCaptchaCredentialRef.current;
+        if (!credential) {
             return null;
         }
-    }), [credentialId, setError, setLoading, setSuccess, user === null || user === void 0 ? void 0 : user.verifiedCredentials]);
+        pendingCaptchaCredentialRef.current = null;
+        client.setCaptchaToken({ captchaToken });
+        setState((prev) => (Object.assign(Object.assign({}, prev), { captchaRequired: false })));
+        return dispatchAndStoreOtp(credential);
+    }), [dispatchAndStoreOtp, setState]);
     const verifyOtp = React.useCallback((_b) => _tslib.__awaiter(void 0, [_b], void 0, function* ({ requestedScopes, verificationToken, }) {
         const otpVerification = otpVerificationRef.current;
         if (!otpVerification) {
@@ -123,8 +152,9 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
     }), [setError, setLoading, setSuccess]);
     const resetOtpRef = React.useCallback(() => {
         otpVerificationRef.current = null;
+        pendingCaptchaCredentialRef.current = null;
     }, []);
-    return { resetOtpRef, sendOtp, verifyOtp };
+    return { resetOtpRef, sendOtp, submitCaptchaToken, verifyOtp };
 };
 
 exports.useStepUpOtp = useStepUpOtp;

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpOtp.d.ts

@@ -10,6 +10,7 @@ type UseStepUpOtpParams = {
 export declare const useStepUpOtp: ({ credentialId, stateActions, }: UseStepUpOtpParams) => {
     resetOtpRef: () => void;
     sendOtp: (params?: SendOtpParams) => Promise<OTPVerification | null>;
+    submitCaptchaToken: (captchaToken: string) => Promise<OTPVerification | null>;
     verifyOtp: ({ requestedScopes, verificationToken, }: VerifyOtpParams) => Promise<VerifyResponse | null>;
 };
 export {};

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpOtp.js

@@ -1,7 +1,7 @@
 'use client'
 import { __awaiter } from '../../../../../_virtual/_tslib.js';
 import { useRef, useCallback } from 'react';
-import { verifyOTP, sendEmailOTP, supportedCountries, sendSmsOTP } from '@dynamic-labs-sdk/client';
+import { isCaptchaRequired, setCaptchaToken, verifyOTP, sendEmailOTP, supportedCountries, sendSmsOTP } from '@dynamic-labs-sdk/client';
 import { JwtVerifiedCredentialFormatEnum } from '@dynamic-labs/sdk-api-core';
 import '@dynamic-labs-sdk/client/core';
 import 'eventemitter3';
@@ -63,8 +63,24 @@ const dispatchOtp = (credential) => __awaiter(void 0, void 0, void 0, function*
 });
 const useStepUpOtp = ({ credentialId, stateActions, }) => {
     const user = useUser();
-    const { setError, setLoading, setSuccess } = stateActions;
+    const { setError, setLoading, setState, setSuccess } = stateActions;
     const otpVerificationRef = useRef(null);
+    // Holds the credential whose OTP send is blocked awaiting a captcha token.
+    const pendingCaptchaCredentialRef = useRef(null);
+    const dispatchAndStoreOtp = useCallback((credential) => __awaiter(void 0, void 0, void 0, function* () {
+        setLoading();
+        try {
+            const otpVerification = yield dispatchOtp(credential);
+            otpVerificationRef.current = otpVerification;
+            setSuccess({ otpVerification });
+            return otpVerification;
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : 'Failed to send OTP';
+            setError(errorMessage);
+            return null;
+        }
+    }), [setError, setLoading, setSuccess]);
     const sendOtp = useCallback((params) => __awaiter(void 0, void 0, void 0, function* () {
         var _a;
         const credentials = user === null || user === void 0 ? void 0 : user.verifiedCredentials;
@@ -82,19 +98,32 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
             setError(`Credential format "${result.format}" does not support OTP verification. Only email and SMS credentials are supported`);
             return null;
         }
-        setLoading();
-        try {
-            const otpVerification = yield dispatchOtp(result);
-            otpVerificationRef.current = otpVerification;
-            setSuccess({ otpVerification });
-            return otpVerification;
+        // The headless client consumes a captcha token when sending an OTP for
+        // captcha-enabled environments. Defer the send and surface the challenge
+        // to the UI, which collects a token and completes it via submitCaptchaToken.
+        if (isCaptchaRequired()) {
+            pendingCaptchaCredentialRef.current = result;
+            setState((prev) => (Object.assign(Object.assign({}, prev), { captchaRequired: true, error: null })));
+            return null;
         }
-        catch (error) {
-            const errorMessage = error instanceof Error ? error.message : 'Failed to send OTP';
-            setError(errorMessage);
+        return dispatchAndStoreOtp(result);
+    }), [
+        credentialId,
+        dispatchAndStoreOtp,
+        setError,
+        setState,
+        user === null || user === void 0 ? void 0 : user.verifiedCredentials,
+    ]);
+    const submitCaptchaToken = useCallback((captchaToken) => __awaiter(void 0, void 0, void 0, function* () {
+        const credential = pendingCaptchaCredentialRef.current;
+        if (!credential) {
             return null;
         }
-    }), [credentialId, setError, setLoading, setSuccess, user === null || user === void 0 ? void 0 : user.verifiedCredentials]);
+        pendingCaptchaCredentialRef.current = null;
+        setCaptchaToken({ captchaToken });
+        setState((prev) => (Object.assign(Object.assign({}, prev), { captchaRequired: false })));
+        return dispatchAndStoreOtp(credential);
+    }), [dispatchAndStoreOtp, setState]);
     const verifyOtp = useCallback((_b) => __awaiter(void 0, [_b], void 0, function* ({ requestedScopes, verificationToken, }) {
         const otpVerification = otpVerificationRef.current;
         if (!otpVerification) {
@@ -119,8 +148,9 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
     }), [setError, setLoading, setSuccess]);
     const resetOtpRef = useCallback(() => {
         otpVerificationRef.current = null;
+        pendingCaptchaCredentialRef.current = null;
     }, []);
-    return { resetOtpRef, sendOtp, verifyOtp };
+    return { resetOtpRef, sendOtp, submitCaptchaToken, verifyOtp };
 };
 
 export { useStepUpOtp };

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpState.cjs

@@ -33,6 +33,7 @@ require('../../../events/dynamicEvents.cjs');
 var useUser = require('../../../client/extension/user/useUser/useUser.cjs');
 
 const INITIAL_STATE = {
+    captchaRequired: false,
     error: null,
     isLoading: false,
     otpVerification: null,

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpState.js

@@ -29,6 +29,7 @@ import '../../../events/dynamicEvents.js';
 import { useUser } from '../../../client/extension/user/useUser/useUser.js';
 
 const INITIAL_STATE = {
+    captchaRequired: false,
     error: null,
     isLoading: false,
     otpVerification: null,

package/src/lib/utils/hooks/useSubmitExchangeFunding/useSubmitExchangeFunding.cjs

@@ -97,11 +97,11 @@ require('qrcode');
 require('../../../widgets/DynamicWidget/views/ManagePasskeysMfaWidgetView/ManagePasskeysMfaWidgetView.cjs');
 require('../../../widgets/DynamicWidget/views/ManageTotpMfaWidgetView/ManageTotpMfaWidgetView.cjs');
 require('../../../widgets/DynamicWidget/views/ReceiveWalletFunds/ReceiveWalletFunds.cjs');
+require('@hcaptcha/react-hcaptcha');
+require('@marsidev/react-turnstile');
 require('../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
 require('../../../context/ConnectWithOtpContext/ConnectWithOtpContext.cjs');
 require('../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
-require('@hcaptcha/react-hcaptcha');
-require('@marsidev/react-turnstile');
 require('../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.cjs');
 require('../../../context/ErrorContext/hooks/useErrorText/useErrorText.cjs');
 require('../../../views/MfaChooseDeviceView/useGetMfaOptions/useGetMfaOptions.cjs');

package/src/lib/utils/hooks/useSubmitExchangeFunding/useSubmitExchangeFunding.js

@@ -93,11 +93,11 @@ import 'qrcode';
 import '../../../widgets/DynamicWidget/views/ManagePasskeysMfaWidgetView/ManagePasskeysMfaWidgetView.js';
 import '../../../widgets/DynamicWidget/views/ManageTotpMfaWidgetView/ManageTotpMfaWidgetView.js';
 import '../../../widgets/DynamicWidget/views/ReceiveWalletFunds/ReceiveWalletFunds.js';
+import '@hcaptcha/react-hcaptcha';
+import '@marsidev/react-turnstile';
 import '../../../context/IpConfigurationContext/IpConfigurationContext.js';
 import '../../../context/ConnectWithOtpContext/ConnectWithOtpContext.js';
 import '../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
-import '@hcaptcha/react-hcaptcha';
-import '@marsidev/react-turnstile';
 import '../../../views/ExchangeWhitelistWarning/ExchangeWhitelistWarning.js';
 import '../../../context/ErrorContext/hooks/useErrorText/useErrorText.js';
 import '../../../views/MfaChooseDeviceView/useGetMfaOptions/useGetMfaOptions.js';

package/src/lib/utils/hooks/useSwitchWallet/useSwitchWallet.cjs

@@ -5,6 +5,7 @@ Object.defineProperty(exports, '__esModule', { value: true });
 
 var _tslib = require('../../../../../_virtual/_tslib.cjs');
 var React = require('react');
+var utils = require('@dynamic-labs/utils');
 var walletConnectorCore = require('@dynamic-labs/wallet-connector-core');
 require('../../../context/DynamicContext/useDynamicContext/useDynamicContext.cjs');
 var useInternalDynamicContext = require('../../../context/DynamicContext/useDynamicContext/useInternalDynamicContext/useInternalDynamicContext.cjs');
@@ -49,6 +50,19 @@ const useSwitchWallet = () => {
         if (!wallet.connector.isAvailable) {
             throw new Error("Cannot make this wallet active, since this wallet doesn't have a compatible connector on this device.");
         }
+        // On mobile, an in-app-browser wallet that isn't injected on the current
+        // browser (e.g. switching to a linked Phantom on mobile web) has no
+        // provider to sign with. Trigger the wallet's in-app-browser redirect up
+        // front so the user lands inside the wallet app, instead of the switch
+        // silently succeeding and every later signature failing. The connector
+        // self-gates: this is a no-op for installed, embedded, or redirect-only
+        // wallets.
+        if (utils.isMobile()) {
+            const didOpenInAppBrowser = wallet.connector.openInAppBrowserIfRequired();
+            if (didOpenInAppBrowser) {
+                return;
+            }
+        }
         const eoaWallet = getEOAWallet(wallet);
         if (eoaWallet && walletConnectorCore.isTurnkeyWalletConnector(eoaWallet.connector)) {
             const sortedVcs = (_b = (_a = eoaWallet.connector) === null || _a === void 0 ? void 0 : _a.verifiedCredentials) === null || _b === void 0 ? void 0 : _b.reduce((acc, vc) => {