@settlemint/dalp-sdk 3.1.19-main.36415955113 → 3.1.19-main.36423867720

package/dist/auth/invite-step-up.d.ts

@@ -0,0 +1,2 @@
+import type { CookieStoreFetch } from "../transport/cookie-store.ts";
+export declare function withInviteStepUp(fetchImpl: CookieStoreFetch, baseUrl: string): CookieStoreFetch;

package/dist/auth.js

@@ -5,13 +5,17 @@ import {
   DALP_AUTH_SURFACE_HEADER2,
   secret2,
   unwrapSecret,
-  normalizeDalpBaseUrl
-} from "./chunk-cr1tms72.js";
+  normalizeDalpBaseUrl,
+  STEP_UP_CHALLENGE_HEADER,
+  STEP_UP_CHALLENGE_PATH,
+  carriesWalletProof,
+  stepUpChallengeRequest
+} from "./chunk-wp4269cm.js";
 import {
   makeCookieStore2,
   createCookieStoreFetch2,
   SDK_USER_AGENT2
-} from "./chunk-kj20benv.js";
+} from "./chunk-84vvr8vq.js";
 
 // src/auth/live.ts
 import { apiKeyClient } from "@better-auth/api-key/client";
@@ -144,6 +148,49 @@ async function decodeDalpAuthClientConfig(input) {
   }
 }
 
+// src/auth/invite-step-up.ts
+var INVITE_MEMBER_PATH = "/api/auth/organization/invite-member";
+var INVITE_MEMBER_OPERATION = `POST ${INVITE_MEMBER_PATH}`;
+function readChallengeId(payload) {
+  const data = payload !== null && typeof payload === "object" ? Reflect.get(payload, "data") : undefined;
+  const challengeId = data !== null && typeof data === "object" ? Reflect.get(data, "challengeId") : undefined;
+  return typeof challengeId === "string" ? challengeId : undefined;
+}
+function invitesWithWalletProof(input, init, baseUrl) {
+  const url = input instanceof Request ? input.url : String(input);
+  if ((init?.method ?? "GET").toUpperCase() !== "POST" || typeof init?.body !== "string" || new URL(url).pathname !== new URL(`${baseUrl}${INVITE_MEMBER_PATH}`).pathname) {
+    return;
+  }
+  const body = JSON.parse(init.body);
+  return carriesWalletProof(body) ? body : undefined;
+}
+function withInviteStepUp(fetchImpl, baseUrl) {
+  return async (input, init) => {
+    const headers = new Headers(init?.headers);
+    const body = invitesWithWalletProof(input, init, baseUrl);
+    if (body === undefined || headers.has("x-api-key") || headers.has(STEP_UP_CHALLENGE_HEADER)) {
+      return fetchImpl(input, init);
+    }
+    const challengeHeaders = new Headers(headers);
+    challengeHeaders.set("Content-Type", "application/json");
+    const issued = await fetchImpl(`${baseUrl}${STEP_UP_CHALLENGE_PATH}`, {
+      method: "POST",
+      headers: challengeHeaders,
+      body: JSON.stringify(await stepUpChallengeRequest(INVITE_MEMBER_OPERATION, null, body)),
+      signal: init?.signal ?? null,
+      ...init?.credentials === undefined ? {} : { credentials: init.credentials }
+    });
+    if (!issued.ok) {
+      return issued;
+    }
+    const challengeId = readChallengeId(await issued.json());
+    if (challengeId !== undefined) {
+      headers.set(STEP_UP_CHALLENGE_HEADER, challengeId);
+    }
+    return fetchImpl(input, { ...init, headers });
+  };
+}
+
 // src/auth/permissions.ts
 import { createAccessControl } from "better-auth/plugins/access";
 import { adminAc, defaultStatements as adminDefaultStatements } from "better-auth/plugins/admin/access";
@@ -315,11 +362,12 @@ function createConfiguredBetterAuthClient(config, cookieStore) {
     deviceAuthorizationClient(),
     organizationClient(organizationPluginOptions)
   ];
+  const baseUrl = normalizeDalpBaseUrl(config.url);
   return createBetterAuthClient({
-    baseURL: `${normalizeDalpBaseUrl(config.url)}/api/auth`,
+    baseURL: `${baseUrl}/api/auth`,
     fetchOptions: {
       headers: authHeaders(config),
-      customFetchImpl: createCookieStoreFetch2(cookieStore, config.fetch),
+      customFetchImpl: withInviteStepUp(createCookieStoreFetch2(cookieStore, config.fetch), baseUrl),
       credentials: "include"
     },
     plugins