@avalabs/avacloud-waas-react 1.3.0 → 1.4.0

package/dist/index.mjs

@@ -1,5 +1,5 @@
 // src/AvaCloudWalletProvider.tsx
-import { createContext as createContext4, useContext as useContext4, useEffect as useEffect5, useState as useState7, useCallback as useCallback5, useRef as useRef3 } from "react";
+import { createContext as createContext4, useContext as useContext4, useEffect as useEffect5, useState as useState8, useCallback as useCallback6, useRef as useRef3 } from "react";
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 import { envs } from "@cubist-labs/cubesigner-sdk";
 
@@ -31,41 +31,15 @@ function getDerivationPath(vm, accountIndex) {
   return `m/44'/${coinIndex}'/0'/0/${accountIndex}`;
 }
 
-// src/hooks/usePostMessage.ts
-import { useCallback, useEffect, useRef } from "react";
-
-// src/constants/storage.ts
-var OIDC_TOKEN_KEY = "avacloud-auth-oidc-token";
-var AUTH_TOKENS_KEY = "auth_tokens";
-var AUTH0_STORAGE_KEYS = {
-  IS_AUTHENTICATED: "auth0.is.authenticated",
-  ACCESS_TOKEN: "auth0.access_token",
-  ID_TOKEN: "auth0.id_token",
-  EXPIRES_AT: "auth0.expires_at"
-};
-var CUBIST_USER_ID_KEY = "cubist_user_id";
-var ORG_CONFIG_CACHE_KEY = "avacloud-org-config-cache";
-
-// src/hooks/usePostMessage.ts
-var globalAuthState = {
-  signupInProgress: false,
-  loginInProgress: false,
-  lastSignupTimestamp: 0,
-  lastLoginTimestamp: 0,
-  processingMessageIds: /* @__PURE__ */ new Set()
-};
-function cleanupProcessedMessageIds() {
-  if (globalAuthState.processingMessageIds.size > 100) {
-    const messageIds = Array.from(globalAuthState.processingMessageIds);
-    globalAuthState.processingMessageIds = new Set(messageIds.slice(-50));
-  }
-}
-function usePostMessage({
+// src/hooks/usePenpalAuth.ts
+import { useCallback, useEffect, useRef, useState } from "react";
+import { connect, WindowMessenger } from "penpal";
+import { AUTH_TOKENS_KEY, OIDC_TOKEN_KEY, AUTH0_STORAGE_KEYS, CUBIST_USER_ID_KEY, ORG_CONFIG_CACHE_KEY } from "@avacloud/waas-common";
+function usePenpalAuth({
   authServiceUrl,
   orgId,
   environment,
   iframe,
-  isIframeReady,
   onAuthSuccess,
   onAuthError,
   onOidcReceived,
@@ -73,16 +47,13 @@ function usePostMessage({
   setIsAuthenticated,
   setUser,
   setIsLoading,
-  setIsIframeReady,
-  cubistClient
+  setIsIframeReady
 }) {
-  const lastAuthStateRef = useRef({
-    isAuthenticated: false,
-    userId: null,
-    lastUpdateTime: 0
-  });
-  const hasRequestedOidcRef = useRef(false);
-  const isHandlingMessageRef = useRef(false);
+  const connectionRef = useRef(null);
+  const [authService, setAuthService] = useState(null);
+  const [isConnected, setIsConnected] = useState(false);
+  const isConnectedRef = useRef(false);
+  const hasCheckedAuthRef = useRef(false);
   const hasLoadedCacheRef = useRef(false);
   useEffect(() => {
     if (orgId && onOrgConfigUpdate && !hasLoadedCacheRef.current) {
@@ -103,246 +74,263 @@ function usePostMessage({
       }
     }
   }, [orgId, environment, onOrgConfigUpdate]);
-  const sendMessage = useCallback((message) => {
-    if (iframe == null ? void 0 : iframe.contentWindow) {
-      try {
-        if (message.type === "SIGNUP_REQUEST") {
-          if (globalAuthState.signupInProgress) {
-            return;
-          }
-          const now = Date.now();
-          if (now - globalAuthState.lastSignupTimestamp < 3e3) {
-            return;
-          }
-          globalAuthState.signupInProgress = true;
-          globalAuthState.lastSignupTimestamp = now;
-          let finalMessage = message;
-          if (!message.requestId) {
-            finalMessage = {
-              ...message,
-              requestId: `signup-${now}`
-            };
-          }
-          let messageToSend = finalMessage;
-          if (finalMessage.payload && typeof finalMessage.payload.email === "string" && typeof finalMessage.payload.password === "string") {
-            messageToSend = {
-              type: "SIGNUP_REQUEST",
-              email: finalMessage.payload.email,
-              password: finalMessage.payload.password,
-              requestId: finalMessage.requestId || `signup-${now}`
-            };
-          }
-          if ("requestId" in messageToSend && messageToSend.requestId) {
-            globalAuthState.processingMessageIds.add(messageToSend.requestId);
-          }
-          iframe.contentWindow.postMessage(messageToSend, authServiceUrl);
-          return;
-        }
-        if (message.type === "LOGIN_REQUEST") {
-          if (globalAuthState.loginInProgress) {
-            return;
-          }
-          const now = Date.now();
-          if (now - globalAuthState.lastLoginTimestamp < 3e3) {
-            return;
-          }
-          globalAuthState.loginInProgress = true;
-          globalAuthState.lastLoginTimestamp = now;
-          let finalMessage = message;
-          if (!message.requestId) {
-            finalMessage = {
-              ...message,
-              requestId: `login-${now}`
+  const parentMethods = {
+    onReady: () => {
+      console.log("[Penpal Parent] Iframe is ready");
+      setIsIframeReady(true);
+    },
+    onAuthStatusChange: (status) => {
+      var _a;
+      console.log("[Penpal Parent] Auth status changed:", status);
+      setIsAuthenticated(status.isAuthenticated);
+      if (status.user) {
+        const userInfo = {
+          email: status.user.email,
+          sub: status.user.sub,
+          configured_mfa: [],
+          displayName: status.user.nickname || status.user.name || ((_a = status.user.email) == null ? void 0 : _a.split("@")[0]) || "User",
+          rawUserData: status.user
+        };
+        setUser(userInfo);
+      } else {
+        setUser(null);
+      }
+      if (status.orgConfig) {
+        onOrgConfigUpdate == null ? void 0 : onOrgConfigUpdate(status.orgConfig);
+        if (orgId) {
+          try {
+            const cachedConfigKey = `${ORG_CONFIG_CACHE_KEY}-${orgId}-${environment}`;
+            const configWithTimestamp = {
+              ...status.orgConfig,
+              _timestamp: Date.now()
             };
+            localStorage.setItem(cachedConfigKey, JSON.stringify(configWithTimestamp));
+          } catch (error) {
           }
-          if (finalMessage.requestId) {
-            globalAuthState.processingMessageIds.add(finalMessage.requestId);
-          }
-          iframe.contentWindow.postMessage(finalMessage, authServiceUrl);
-          return;
-        }
-        iframe.contentWindow.postMessage(message, authServiceUrl);
-      } catch (error) {
-        if (message.type === "SIGNUP_REQUEST") {
-          globalAuthState.signupInProgress = false;
-        }
-        if (message.type === "LOGIN_REQUEST") {
-          globalAuthState.loginInProgress = false;
         }
       }
-    }
-  }, [iframe, authServiceUrl]);
-  useEffect(() => {
-    const handleMessage = async (event) => {
-      var _a, _b, _c, _d, _e, _f, _g;
-      if (isHandlingMessageRef.current) {
-        return;
+      if (status.isAuthenticated) {
+        onAuthSuccess == null ? void 0 : onAuthSuccess();
       }
-      if (event.origin !== new URL(authServiceUrl).origin) {
+      setIsLoading(false);
+    },
+    onError: (error) => {
+      console.error("[Penpal Parent] Error from iframe:", error);
+      if (error.message === "User not authenticated in iframe" || error.message === "Unknown error" || error.message.includes("OIDC user not found")) {
         return;
       }
-      if (typeof ((_a = event.data) == null ? void 0 : _a.type) !== "string") {
+      onAuthError == null ? void 0 : onAuthError(new Error(error.message));
+      setIsLoading(false);
+    },
+    onWalletUpdate: (wallet) => {
+      console.log("[Penpal Parent] Wallet update:", wallet);
+    }
+  };
+  useEffect(() => {
+    if (!(iframe == null ? void 0 : iframe.contentWindow)) {
+      return;
+    }
+    let isCancelled = false;
+    const setupConnection = async (attempt = 1, maxAttempts = 3) => {
+      if (isCancelled) return;
+      if (isConnectedRef.current && connectionRef.current) {
+        console.log("[Penpal Parent] Already connected, skipping setup");
         return;
       }
-      if (event.data.requestId && globalAuthState.processingMessageIds.has(event.data.requestId)) {
-        return;
+      console.log(`[Penpal Parent] Setting up connection to iframe (attempt ${attempt}/${maxAttempts})...`);
+      if (connectionRef.current) {
+        connectionRef.current.destroy();
+        connectionRef.current = null;
+        setAuthService(null);
+        setIsConnected(false);
+        isConnectedRef.current = false;
       }
       try {
-        isHandlingMessageRef.current = true;
-        if (event.data.type === "ERROR") {
-          globalAuthState.signupInProgress = false;
-          globalAuthState.loginInProgress = false;
-        } else if (event.data.type === "AUTH_STATUS" && event.data.isAuthenticated) {
-          globalAuthState.signupInProgress = false;
-          globalAuthState.loginInProgress = false;
-          cleanupProcessedMessageIds();
-        } else if (event.data.type === "RECEIVE_OIDC") {
-          globalAuthState.signupInProgress = false;
-          globalAuthState.loginInProgress = false;
+        const authServiceOrigin = new URL(authServiceUrl).origin;
+        const messenger = new WindowMessenger({
+          remoteWindow: iframe.contentWindow,
+          allowedOrigins: [authServiceOrigin]
+        });
+        const connection = connect({
+          messenger,
+          methods: parentMethods,
+          timeout: 1e4
+          // 10 second connection timeout per attempt
+        });
+        connectionRef.current = connection;
+        const remote = await connection.promise;
+        if (isCancelled) {
+          connection.destroy();
+          return;
         }
-        switch (event.data.type) {
-          case "IFRAME_READY":
-            setIsIframeReady(true);
-            break;
-          case "RECEIVE_OIDC":
-            if (typeof ((_b = event.data.payload) == null ? void 0 : _b.idToken) === "string") {
-              const oidcToken = event.data.payload.idToken;
-              hasRequestedOidcRef.current = false;
-              onOidcReceived == null ? void 0 : onOidcReceived(oidcToken);
-            } else {
-              hasRequestedOidcRef.current = false;
-            }
-            break;
-          case "AUTH_STATUS": {
-            const newIsAuthenticated = !!event.data.isAuthenticated;
-            const newUserId = (_d = (_c = event.data.user) == null ? void 0 : _c.sub) != null ? _d : null;
-            const now = Date.now();
-            if (now - lastAuthStateRef.current.lastUpdateTime < 500) {
-              return;
-            }
-            const authStateChanged = lastAuthStateRef.current.isAuthenticated !== newIsAuthenticated || lastAuthStateRef.current.userId !== newUserId;
-            if (authStateChanged) {
-              setIsAuthenticated(newIsAuthenticated);
-              if (event.data.user) {
-                const userInfo = {
-                  email: event.data.user.email,
-                  sub: event.data.user.sub,
-                  configured_mfa: [],
-                  displayName: event.data.user.nickname || event.data.user.name || ((_e = event.data.user.email) == null ? void 0 : _e.split("@")[0]) || "User",
-                  rawUserData: event.data.user
-                };
-                setUser(userInfo);
-                if (newIsAuthenticated && !cubistClient && !hasRequestedOidcRef.current) {
-                  hasRequestedOidcRef.current = true;
-                  sendMessage({ type: "GET_OIDC" });
-                  return;
-                }
-              } else {
-                setUser(null);
-                localStorage.removeItem(AUTH_TOKENS_KEY);
-                localStorage.removeItem(AUTH0_STORAGE_KEYS.IS_AUTHENTICATED);
-                sessionStorage.removeItem(OIDC_TOKEN_KEY);
-              }
-              lastAuthStateRef.current = {
-                isAuthenticated: newIsAuthenticated,
-                userId: newUserId,
-                lastUpdateTime: now
-              };
-              if (newIsAuthenticated && event.data.user) {
-                if (!hasRequestedOidcRef.current) {
-                  if (event.data.tokens) {
-                    localStorage.setItem(AUTH_TOKENS_KEY, JSON.stringify(event.data.tokens));
-                  }
-                  onAuthSuccess == null ? void 0 : onAuthSuccess();
-                }
-              }
-            }
-            if (event.data.orgConfig && onOrgConfigUpdate) {
-              onOrgConfigUpdate(event.data.orgConfig);
-              if (orgId) {
-                try {
-                  const cachedConfigKey = `${ORG_CONFIG_CACHE_KEY}-${orgId}-${environment}`;
-                  const configWithTimestamp = {
-                    ...event.data.orgConfig,
-                    _timestamp: Date.now()
-                  };
-                  localStorage.setItem(cachedConfigKey, JSON.stringify(configWithTimestamp));
-                } catch (error) {
-                }
-              }
-            }
-            if (!hasRequestedOidcRef.current) {
-              setIsLoading(false);
-            }
-            break;
-          }
-          case "REGISTER_SUCCESS": {
-            const userId = (_f = event.data.payload) == null ? void 0 : _f.userId;
-            if (userId) {
-              localStorage.setItem(CUBIST_USER_ID_KEY, userId);
-              if (!hasRequestedOidcRef.current) {
-                hasRequestedOidcRef.current = true;
-                sendMessage({ type: "GET_OIDC" });
-              }
-            }
-            break;
+        console.log("[Penpal Parent] Connected to auth service");
+        isConnectedRef.current = true;
+        setAuthService(remote);
+        setIsConnected(true);
+        setIsIframeReady(true);
+      } catch (error) {
+        if (isCancelled) return;
+        console.error(`[Penpal Parent] Failed to connect (attempt ${attempt}):`, error);
+        if (attempt < maxAttempts) {
+          console.log(`[Penpal Parent] Retrying in 1 second...`);
+          await new Promise((resolve) => setTimeout(resolve, 1e3));
+          if (!isCancelled) {
+            await setupConnection(attempt + 1, maxAttempts);
           }
-          case "ERROR":
-            if (event.data.error === "User not authenticated in iframe") {
-              isHandlingMessageRef.current = false;
-              return;
-            }
-            onAuthError == null ? void 0 : onAuthError(new Error((_g = event.data.error) != null ? _g : "Unknown error"));
-            setIsLoading(false);
-            break;
+        } else {
+          onAuthError == null ? void 0 : onAuthError(error instanceof Error ? error : new Error("Failed to connect to auth service"));
         }
-      } finally {
-        isHandlingMessageRef.current = false;
       }
     };
-    window.addEventListener("message", handleMessage);
-    return () => window.removeEventListener("message", handleMessage);
-  }, [
-    authServiceUrl,
-    onAuthError,
-    onAuthSuccess,
-    onOidcReceived,
-    onOrgConfigUpdate,
-    setIsAuthenticated,
-    setIsIframeReady,
-    setIsLoading,
-    setUser,
-    sendMessage,
-    cubistClient,
-    orgId,
-    environment
-  ]);
+    setupConnection();
+    return () => {
+      isCancelled = true;
+    };
+  }, [iframe, authServiceUrl]);
   useEffect(() => {
-    if (isIframeReady && (iframe == null ? void 0 : iframe.contentWindow)) {
-      sendMessage({
-        type: "CHECK_AUTH_STATUS",
-        payload: {
-          orgId,
-          environment
+    if (isConnected && authService && !hasCheckedAuthRef.current) {
+      hasCheckedAuthRef.current = true;
+      authService.checkAuthStatus(orgId, environment).then((status) => {
+        console.log("[Penpal Parent] Initial auth status:", status);
+        parentMethods.onAuthStatusChange(status);
+        if (status.isAuthenticated) {
+          return authService.getOidc();
         }
+        return null;
+      }).then((oidcResult) => {
+        if (oidcResult == null ? void 0 : oidcResult.idToken) {
+          onOidcReceived == null ? void 0 : onOidcReceived(oidcResult.idToken);
+        }
+      }).catch((error) => {
+        console.error("[Penpal Parent] Error checking auth status:", error);
+        setIsLoading(false);
       });
     }
-  }, [isIframeReady, iframe, sendMessage, orgId, environment]);
+  }, [isConnected, authService, orgId, environment]);
+  const login = useCallback(async (params) => {
+    var _a;
+    if (!authService) {
+      console.warn("[Penpal] Cannot login - not connected");
+      return;
+    }
+    try {
+      const result = await authService.login(params || {});
+      setIsAuthenticated(true);
+      if (result.user) {
+        const userInfo = {
+          email: result.user.email,
+          sub: result.user.sub,
+          configured_mfa: [],
+          displayName: result.user.nickname || result.user.name || ((_a = result.user.email) == null ? void 0 : _a.split("@")[0]) || "User",
+          rawUserData: result.user
+        };
+        setUser(userInfo);
+      }
+      if (result.accessToken) {
+        onOidcReceived == null ? void 0 : onOidcReceived(result.accessToken);
+      }
+      onAuthSuccess == null ? void 0 : onAuthSuccess();
+      return result;
+    } catch (error) {
+      onAuthError == null ? void 0 : onAuthError(error instanceof Error ? error : new Error("Login failed"));
+      throw error;
+    }
+  }, [authService, setIsAuthenticated, setUser, onOidcReceived, onAuthSuccess, onAuthError]);
+  const signup = useCallback(async (email, password) => {
+    var _a;
+    if (!authService) {
+      console.warn("[Penpal] Cannot signup - not connected");
+      return;
+    }
+    try {
+      const result = await authService.signup({ email, password });
+      setIsAuthenticated(true);
+      if (result.user) {
+        const userInfo = {
+          email: result.user.email,
+          sub: result.user.sub,
+          configured_mfa: [],
+          displayName: result.user.nickname || result.user.name || ((_a = result.user.email) == null ? void 0 : _a.split("@")[0]) || "User",
+          rawUserData: result.user
+        };
+        setUser(userInfo);
+      }
+      if (result.accessToken) {
+        onOidcReceived == null ? void 0 : onOidcReceived(result.accessToken);
+      }
+      onAuthSuccess == null ? void 0 : onAuthSuccess();
+      return result;
+    } catch (error) {
+      onAuthError == null ? void 0 : onAuthError(error instanceof Error ? error : new Error("Signup failed"));
+      throw error;
+    }
+  }, [authService, setIsAuthenticated, setUser, onOidcReceived, onAuthSuccess, onAuthError]);
+  const logout = useCallback(async () => {
+    if (!authService) {
+      console.warn("[Penpal] Cannot logout - not connected");
+      return;
+    }
+    try {
+      await authService.logout();
+      setIsAuthenticated(false);
+      setUser(null);
+      localStorage.removeItem(AUTH_TOKENS_KEY);
+      localStorage.removeItem(AUTH0_STORAGE_KEYS.IS_AUTHENTICATED);
+      localStorage.removeItem(AUTH0_STORAGE_KEYS.ACCESS_TOKEN);
+      localStorage.removeItem(AUTH0_STORAGE_KEYS.ID_TOKEN);
+      localStorage.removeItem(AUTH0_STORAGE_KEYS.EXPIRES_AT);
+      localStorage.removeItem(CUBIST_USER_ID_KEY);
+      sessionStorage.removeItem(OIDC_TOKEN_KEY);
+    } catch (error) {
+      onAuthError == null ? void 0 : onAuthError(error instanceof Error ? error : new Error("Logout failed"));
+      throw error;
+    }
+  }, [authService, setIsAuthenticated, setUser, onAuthError]);
+  const getOidc = useCallback(async () => {
+    if (!authService) {
+      console.warn("[Penpal] Cannot get OIDC - not connected");
+      return;
+    }
+    try {
+      return await authService.getOidc();
+    } catch (error) {
+      onAuthError == null ? void 0 : onAuthError(error instanceof Error ? error : new Error("Failed to get OIDC token"));
+      throw error;
+    }
+  }, [authService, onAuthError]);
+  const checkAuthStatus = useCallback(async () => {
+    if (!authService) {
+      console.warn("[Penpal] Cannot check auth status - not connected");
+      return;
+    }
+    try {
+      return await authService.checkAuthStatus(orgId, environment);
+    } catch (error) {
+      onAuthError == null ? void 0 : onAuthError(error instanceof Error ? error : new Error("Failed to check auth status"));
+      throw error;
+    }
+  }, [authService, orgId, environment, onAuthError]);
   return {
-    sendMessage
+    authService,
+    isConnected,
+    login,
+    signup,
+    logout,
+    getOidc,
+    checkAuthStatus
   };
 }
 
 // src/AuthModalContext.tsx
-import { createContext, useContext, useState as useState3, useCallback as useCallback2 } from "react";
+import { createContext, useContext, useState as useState4, useCallback as useCallback3 } from "react";
 import { Dialog as Dialog2, DialogContent as DialogContent2, DialogTitle } from "@avalabs/core-k2-components";
 
 // src/components/Modal.tsx
-import { useState as useState2, useEffect as useEffect2, useRef as useRef2 } from "react";
+import { useState as useState3, useRef as useRef2, useCallback as useCallback2, useEffect as useEffect2 } from "react";
 import { Dialog, DialogContent, IconButton as IconButton2, Stack as Stack3, XIcon } from "@avalabs/core-k2-components";
 
 // src/components/SignInContent.tsx
-import { useState } from "react";
+import { useState as useState2 } from "react";
 import { Button, TextField, Typography as Typography2, Stack as Stack2, IconButton, Divider, GoogleIcon, AppleIcon, XTwitterIcon, FacebookIcon } from "@avalabs/core-k2-components";
 
 // src/components/PoweredByAvaCloud.tsx
@@ -372,10 +360,10 @@ function SignInContent({
   isSubmitting,
   socialLogins = ["google", "x", "apple"]
 }) {
-  const [email, setEmail] = useState("");
-  const [password, setPassword] = useState("");
-  const [isPasswordStep, setIsPasswordStep] = useState(false);
-  const [isSignupMode, setIsSignupMode] = useState(false);
+  const [email, setEmail] = useState2("");
+  const [password, setPassword] = useState2("");
+  const [isPasswordStep, setIsPasswordStep] = useState2(false);
+  const [isSignupMode, setIsSignupMode] = useState2(false);
   const providerConnectionMap = {
     "google": "google-oauth2",
     "x": "twitter",
@@ -949,123 +937,72 @@ function SignInContent({
 import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
 function LoginModal({ open, onClose }) {
   var _a;
-  const { iframe, orgConfig, signup } = useAvaCloudWallet();
-  const [isSubmitting, setIsSubmitting] = useState2(false);
-  const [error, setError] = useState2("");
+  const { orgConfig, signup, login, isAuthenticated } = useAvaCloudWallet();
+  const [isSubmitting, setIsSubmitting] = useState3(false);
+  const [error, setError] = useState3("");
   const timeoutIdRef = useRef2(null);
-  const signupInProgressRef = useRef2(false);
-  const lastSignupAttemptRef = useRef2(0);
   const socialLogins = (_a = orgConfig == null ? void 0 : orgConfig.adminPortalSettings) == null ? void 0 : _a.socialLogins;
   useEffect2(() => {
-    let requestInProgress = false;
-    const handleMessage = (event) => {
-      if (!event.data || typeof event.data.type !== "string") {
-        return;
+    if (isAuthenticated && open) {
+      setIsSubmitting(false);
+      if (timeoutIdRef.current) {
+        clearTimeout(timeoutIdRef.current);
+        timeoutIdRef.current = null;
       }
-      if (event.data.type === "ERROR") {
-        if (event.data.payload === "User not authenticated in iframe") {
-          return;
-        }
-        setError(event.data.payload);
-        setIsSubmitting(false);
-        signupInProgressRef.current = false;
-        if (timeoutIdRef.current) {
-          clearTimeout(timeoutIdRef.current);
-          timeoutIdRef.current = null;
-        }
-      } else if (event.data.type === "AUTH_STATUS" && event.data.isAuthenticated) {
-        setIsSubmitting(false);
-        signupInProgressRef.current = false;
-        requestInProgress = false;
-        if (timeoutIdRef.current) {
-          clearTimeout(timeoutIdRef.current);
-          timeoutIdRef.current = null;
-        }
-        onClose();
-      } else if (event.data.type === "RECEIVE_OIDC") {
-        signupInProgressRef.current = false;
-        requestInProgress = false;
+      onClose();
+    }
+  }, [isAuthenticated, open, onClose]);
+  useEffect2(() => {
+    if (!open) {
+      setIsSubmitting(false);
+      setError("");
+      if (timeoutIdRef.current) {
+        clearTimeout(timeoutIdRef.current);
+        timeoutIdRef.current = null;
       }
-    };
-    window.addEventListener("message", handleMessage);
+    }
+  }, [open]);
+  useEffect2(() => {
     return () => {
-      window.removeEventListener("message", handleMessage);
       if (timeoutIdRef.current) {
         clearTimeout(timeoutIdRef.current);
         timeoutIdRef.current = null;
       }
     };
-  }, [onClose]);
-  const handleProviderLogin = (provider) => {
-    var _a2;
+  }, []);
+  const handleProviderLogin = useCallback2((provider) => {
     setError("");
-    if (!iframe) {
-      setError("Authentication service not available");
-      return;
-    }
-    (_a2 = iframe.contentWindow) == null ? void 0 : _a2.postMessage({
-      type: "LOGIN_REQUEST",
-      connection: provider,
-      requestId: `login-${Date.now()}`
-    }, "*");
-    onClose();
-  };
-  const handleEmailLogin = (email, password) => {
-    var _a2;
+    setIsSubmitting(true);
+    login({ connection: provider });
+  }, [login]);
+  const handleEmailLogin = useCallback2((email, password) => {
     setError("");
     setIsSubmitting(true);
-    if (!iframe) {
-      setError("Authentication service not available");
-      setIsSubmitting(false);
-      return;
-    }
     if (timeoutIdRef.current) {
       clearTimeout(timeoutIdRef.current);
       timeoutIdRef.current = null;
     }
-    (_a2 = iframe.contentWindow) == null ? void 0 : _a2.postMessage({
-      type: "LOGIN_REQUEST",
-      email,
-      password,
-      requestId: `login-${Date.now()}`
-    }, "*");
+    login({ email, password });
     timeoutIdRef.current = setTimeout(() => {
       setError("Authentication service timed out");
       setIsSubmitting(false);
       timeoutIdRef.current = null;
     }, 1e4);
-  };
-  const handleEmailSignup = (email, password) => {
-    if (signupInProgressRef.current) {
-      return;
-    }
-    const now = Date.now();
-    if (now - lastSignupAttemptRef.current < 2e3) {
-      return;
-    }
-    lastSignupAttemptRef.current = now;
+  }, [login]);
+  const handleEmailSignup = useCallback2((email, password) => {
     setError("");
     setIsSubmitting(true);
-    signupInProgressRef.current = true;
     if (timeoutIdRef.current) {
       clearTimeout(timeoutIdRef.current);
       timeoutIdRef.current = null;
     }
-    try {
-      signup(email, password);
-    } catch (error2) {
-      setError("Failed to initiate signup");
-      setIsSubmitting(false);
-      signupInProgressRef.current = false;
-      return;
-    }
+    signup(email, password);
     timeoutIdRef.current = setTimeout(() => {
       setError("Authentication service timed out");
       setIsSubmitting(false);
-      signupInProgressRef.current = false;
       timeoutIdRef.current = null;
     }, 1e4);
-  };
+  }, [signup]);
   return /* @__PURE__ */ jsxs3(
     Dialog,
     {
@@ -1153,9 +1090,9 @@ function LoginModal({ open, onClose }) {
 import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
 var AuthModalContext = createContext(void 0);
 function AuthModalProvider({ children }) {
-  const [isModalOpen, setIsModalOpen] = useState3(false);
-  const openLoginModal = useCallback2(() => setIsModalOpen(true), []);
-  const closeLoginModal = useCallback2(() => setIsModalOpen(false), []);
+  const [isModalOpen, setIsModalOpen] = useState4(false);
+  const openLoginModal = useCallback3(() => setIsModalOpen(true), []);
+  const closeLoginModal = useCallback3(() => setIsModalOpen(false), []);
   return /* @__PURE__ */ jsxs4(AuthModalContext.Provider, { value: { openLoginModal, closeLoginModal, isModalOpen }, children: [
     children,
     /* @__PURE__ */ jsxs4(
@@ -1190,11 +1127,11 @@ function useAuthModal() {
 import { CubeSignerClient } from "@cubist-labs/cubesigner-sdk";
 
 // src/providers/ViemContext.tsx
-import { createContext as createContext2, useContext as useContext2, useState as useState4, useEffect as useEffect3 } from "react";
+import { createContext as createContext2, useContext as useContext2, useState as useState5, useEffect as useEffect3 } from "react";
 import { createPublicClient, createWalletClient, http } from "viem";
 
 // src/hooks/useAuth.ts
-import { useCallback as useCallback3 } from "react";
+import { useCallback as useCallback4 } from "react";
 function useAuth() {
   const {
     isAuthenticated,
@@ -1207,7 +1144,7 @@ function useAuth() {
     cubistError
   } = useAvaCloudWallet();
   const { openLoginModal } = useAuthModal();
-  const login = useCallback3(() => {
+  const login = useCallback4(() => {
     openLoginModal();
   }, [openLoginModal]);
   return {
@@ -1228,10 +1165,10 @@ import { jsx as jsx5 } from "react/jsx-runtime";
 var ViemContext = createContext2(null);
 function ViemProvider({ children, rpcUrl, chainId, explorerUrl }) {
   var _a, _b;
-  const [publicClient, setPublicClient] = useState4(null);
-  const [walletClient, setWalletClient] = useState4(null);
-  const [isConnected, setIsConnected] = useState4(false);
-  const [error, setError] = useState4(null);
+  const [publicClient, setPublicClient] = useState5(null);
+  const [walletClient, setWalletClient] = useState5(null);
+  const [isConnected, setIsConnected] = useState5(false);
+  const [error, setError] = useState5(null);
   const { cubistClient, wallet: authWallet } = useAuth();
   useEffect3(() => {
     const initClient = async () => {
@@ -1397,11 +1334,11 @@ var GlacierApiClient = class {
 var glacierApi = new GlacierApiClient();
 
 // src/hooks/useChainId.ts
-import { useState as useState5 } from "react";
+import { useState as useState6 } from "react";
 var CHAIN_ID_STORAGE_KEY = "avalanche-chain-id";
 var DEFAULT_CHAIN_ID = 43113;
 function useChainId() {
-  const [chainId, setChainIdState] = useState5(() => {
+  const [chainId, setChainIdState] = useState6(() => {
     const storedChainId = localStorage.getItem(CHAIN_ID_STORAGE_KEY);
     return storedChainId ? Number.parseInt(storedChainId, 10) : DEFAULT_CHAIN_ID;
   });
@@ -1481,7 +1418,7 @@ function useERC1155Balances(address, chainId) {
 
 // src/providers/ThemeProvider.tsx
 import { ThemeProvider as K2ThemeProvider, createTheme } from "@avalabs/core-k2-components";
-import { createContext as createContext3, useContext as useContext3, useState as useState6, useCallback as useCallback4, useEffect as useEffect4 } from "react";
+import { createContext as createContext3, useContext as useContext3, useState as useState7, useCallback as useCallback5, useEffect as useEffect4 } from "react";
 import { jsx as jsx6 } from "react/jsx-runtime";
 var ThemeContext = createContext3({
   isDarkMode: false,
@@ -1527,13 +1464,13 @@ var darkTheme = createTheme({
   }
 });
 function ThemeProvider({ children, darkMode, onDarkModeChange }) {
-  const [isDarkMode, setIsDarkMode] = useState6(darkMode != null ? darkMode : false);
+  const [isDarkMode, setIsDarkMode] = useState7(darkMode != null ? darkMode : false);
   useEffect4(() => {
     if (darkMode !== void 0 && darkMode !== isDarkMode) {
       setIsDarkMode(darkMode);
     }
-  }, [darkMode]);
-  const toggleTheme = useCallback4(() => {
+  }, [darkMode, isDarkMode]);
+  const toggleTheme = useCallback5(() => {
     const newDarkMode = !isDarkMode;
     setIsDarkMode(newDarkMode);
     onDarkModeChange == null ? void 0 : onDarkModeChange(newDarkMode);
@@ -1541,6 +1478,18 @@ function ThemeProvider({ children, darkMode, onDarkModeChange }) {
   return /* @__PURE__ */ jsx6(ThemeContext.Provider, { value: { isDarkMode, toggleTheme }, children: /* @__PURE__ */ jsx6(K2ThemeProvider, { theme: isDarkMode ? darkTheme : lightTheme, children }) });
 }
 
+// src/constants/storage.ts
+var OIDC_TOKEN_KEY2 = "avacloud-auth-oidc-token";
+var AUTH_TOKENS_KEY2 = "auth_tokens";
+var AUTH0_STORAGE_KEYS2 = {
+  IS_AUTHENTICATED: "auth0.is.authenticated",
+  ACCESS_TOKEN: "auth0.access_token",
+  ID_TOKEN: "auth0.id_token",
+  EXPIRES_AT: "auth0.expires_at"
+};
+var CUBIST_USER_ID_KEY2 = "cubist_user_id";
+var ORG_CONFIG_CACHE_KEY2 = "avacloud-org-config-cache";
+
 // src/AvaCloudWalletProvider.tsx
 import { Fragment, jsx as jsx7 } from "react/jsx-runtime";
 var AvaCloudWalletContext = createContext4(void 0);
@@ -1571,12 +1520,30 @@ function ViemProviderWrapper({ children, chainId }) {
     }
   );
 }
+function normalizeOrgConfig(config) {
+  if (!config) {
+    return null;
+  }
+  const typedConfig = config;
+  const explicitWalletProvider = typeof typedConfig.walletProviderOrgID === "string" ? typedConfig.walletProviderOrgID.trim() : "";
+  const cubistOrgId = typeof typedConfig.cubistOrgId === "string" ? typedConfig.cubistOrgId.trim() : "";
+  const resolvedOrgId = explicitWalletProvider || cubistOrgId;
+  if (!resolvedOrgId) {
+    return typedConfig;
+  }
+  return {
+    ...typedConfig,
+    walletProviderOrgID: resolvedOrgId,
+    cubistOrgId: cubistOrgId || resolvedOrgId
+  };
+}
 function AvaCloudWalletProvider({
   children,
   orgId,
   chainId = 43113,
   darkMode = false,
   env = "production",
+  authServiceUrl: customAuthServiceUrl,
   onAuthSuccess,
   onAuthError,
   onWalletUpdate
@@ -1585,24 +1552,40 @@ function AvaCloudWalletProvider({
   useEffect5(() => {
     setChainId(chainId);
   }, [chainId, setChainId]);
-  const authServiceUrl = env === "development" ? "http://localhost:3000" : env === "staging" ? "https://ac-auth-service-env-staging-ava-labs.vercel.app" : "https://ac-auth-service.vercel.app";
+  const getAuthServiceUrl = () => {
+    var _a;
+    if (customAuthServiceUrl) {
+      return customAuthServiceUrl;
+    }
+    if (typeof process !== "undefined" && ((_a = process.env) == null ? void 0 : _a.NEXT_PUBLIC_AUTH_SERVICE_URL)) {
+      return process.env.NEXT_PUBLIC_AUTH_SERVICE_URL;
+    }
+    if (env === "development") {
+      return "http://localhost:3000";
+    } else if (env === "staging") {
+      return "https://ac-auth-service-env-staging-ava-labs.vercel.app";
+    } else {
+      return "https://ac-auth-service.vercel.app";
+    }
+  };
+  const authServiceUrl = getAuthServiceUrl();
   const environment = env;
-  const [isAuthenticated, setIsAuthenticated] = useState7(false);
-  const [isCubistLoading, setIsCubistLoading] = useState7(true);
-  const [isLoading, setIsLoading] = useState7(true);
-  const [user, setUser] = useState7(null);
-  const [wallet, setWallet] = useState7({ address: null });
-  const [orgConfig, setOrgConfig] = useState7(null);
-  const [iframe, setIframe] = useState7(null);
-  const [isIframeReady, setIsIframeReady] = useState7(false);
-  const [cubistClient, setCubistClient] = useState7(null);
-  const [cubistError, setCubistError] = useState7(null);
-  const [pendingOidcToken, setPendingOidcToken] = useState7(null);
+  const [isAuthenticated, setIsAuthenticated] = useState8(false);
+  const [isCubistLoading, setIsCubistLoading] = useState8(true);
+  const [isLoading, setIsLoading] = useState8(true);
+  const [user, setUser] = useState8(null);
+  const [wallet, setWallet] = useState8({ address: null });
+  const [orgConfig, setOrgConfig] = useState8(null);
+  const [iframe, setIframe] = useState8(null);
+  const [_isIframeReady, setIsIframeReady] = useState8(false);
+  const [cubistClient, setCubistClient] = useState8(null);
+  const [cubistError, setCubistError] = useState8(null);
+  const [pendingOidcToken, setPendingOidcToken] = useState8(null);
   const iframeRef = useRef3(null);
   useEffect5(() => {
     setIsLoading(isCubistLoading || isAuthenticated && !wallet.address);
   }, [isCubistLoading, isAuthenticated, wallet.address]);
-  const getWalletInfo = useCallback5(async (client, sessionId) => {
+  const getWalletInfo = useCallback6(async (client, sessionId) => {
     try {
       const sessionKeys = await client.sessionKeys();
       if (!sessionKeys.length) {
@@ -1623,7 +1606,7 @@ function AvaCloudWalletProvider({
       return null;
     }
   }, [orgConfig]);
-  const loginWithCubist = useCallback5(async (oidcToken) => {
+  const loginWithCubist = useCallback6(async (oidcToken) => {
     if (!orgConfig || !orgConfig.walletProviderOrgID) {
       const error = new Error("Missing required walletProviderOrgID in organization configuration");
       setCubistError(error);
@@ -1641,7 +1624,7 @@ function AvaCloudWalletProvider({
       if (oidcToken) {
         accessToken = oidcToken;
       } else {
-        const tokens = localStorage.getItem(AUTH_TOKENS_KEY);
+        const tokens = localStorage.getItem(AUTH_TOKENS_KEY2);
         if (!tokens) {
           throw new Error("No authentication tokens found in localStorage");
         }
@@ -1684,8 +1667,8 @@ function AvaCloudWalletProvider({
           });
         }
       } catch (error) {
-        localStorage.removeItem(AUTH_TOKENS_KEY);
-        localStorage.removeItem(AUTH0_STORAGE_KEYS.IS_AUTHENTICATED);
+        localStorage.removeItem(AUTH_TOKENS_KEY2);
+        localStorage.removeItem(AUTH0_STORAGE_KEYS2.IS_AUTHENTICATED);
         setIsAuthenticated(false);
         setUser(null);
         setCubistClient(null);
@@ -1699,12 +1682,17 @@ function AvaCloudWalletProvider({
       setIsCubistLoading(false);
     }
   }, [wallet, onWalletUpdate, onAuthError, getWalletInfo, orgConfig, environment]);
-  const { sendMessage } = usePostMessage({
+  const {
+    authService,
+    isConnected,
+    login: penpalLogin,
+    signup: penpalSignup,
+    logout: penpalLogout
+  } = usePenpalAuth({
     authServiceUrl,
     orgId,
     environment,
     iframe,
-    isIframeReady,
     onAuthSuccess: () => {
       if (user) {
         if (wallet.address) {
@@ -1714,8 +1702,7 @@ function AvaCloudWalletProvider({
     },
     onAuthError: (error) => {
       const errorMessage = (error == null ? void 0 : error.message) || "";
-      if (errorMessage === "User not authenticated in iframe" || errorMessage === "Unknown error" || // Generic error that often appears during signup
-      errorMessage.includes("OIDC user not found")) {
+      if (errorMessage === "User not authenticated in iframe" || errorMessage === "Unknown error" || errorMessage.includes("OIDC user not found")) {
         return;
       }
       setIsCubistLoading(false);
@@ -1741,76 +1728,78 @@ function AvaCloudWalletProvider({
       };
     },
     onOrgConfigUpdate: (config) => {
-      setOrgConfig(config);
+      setOrgConfig(normalizeOrgConfig(config));
     },
     setIsAuthenticated,
     setUser,
-    setIsLoading: (isLoading2) => {
-      setIsLoading(isLoading2);
+    setIsLoading: (loading) => {
+      setIsLoading(loading);
     },
-    setIsIframeReady,
-    wallet,
-    cubistClient
+    setIsIframeReady
   });
-  const login = useCallback5(() => {
-    if (iframe == null ? void 0 : iframe.contentWindow) {
-      setIsCubistLoading(true);
-      sendMessage({ type: "LOGIN_REQUEST" });
+  const login = useCallback6((params) => {
+    if (isConnected) {
+      const isEmailLogin = (params == null ? void 0 : params.email) && (params == null ? void 0 : params.password);
+      if (isEmailLogin) {
+        setIsCubistLoading(true);
+      }
+      penpalLogin(params).catch((error) => {
+        setIsCubistLoading(false);
+        onAuthError == null ? void 0 : onAuthError(error instanceof Error ? error : new Error("Login failed"));
+      });
     }
-  }, [iframe, sendMessage]);
-  const signup = useCallback5((email, password) => {
-    if (iframe == null ? void 0 : iframe.contentWindow) {
+  }, [isConnected, penpalLogin, onAuthError]);
+  const signup = useCallback6((email, password) => {
+    if (isConnected) {
       setIsCubistLoading(true);
-      sendMessage({
-        type: "SIGNUP_REQUEST",
-        payload: {
-          email,
-          password
-        },
-        requestId: `signup-${Date.now()}`
+      penpalSignup(email, password).catch((error) => {
+        setIsCubistLoading(false);
+        onAuthError == null ? void 0 : onAuthError(error instanceof Error ? error : new Error("Signup failed"));
       });
     }
-  }, [iframe, sendMessage]);
-  const logout = useCallback5(() => {
-    sendMessage({ type: "LOGOUT_REQUEST" });
+  }, [isConnected, penpalSignup, onAuthError]);
+  const logout = useCallback6(() => {
+    penpalLogout().catch((error) => {
+      console.error("Logout error:", error);
+    });
     setUser(null);
     setWallet({ address: null });
     setIsAuthenticated(false);
-    localStorage.removeItem(AUTH_TOKENS_KEY);
-    localStorage.removeItem(AUTH0_STORAGE_KEYS.IS_AUTHENTICATED);
-    localStorage.removeItem(AUTH0_STORAGE_KEYS.ACCESS_TOKEN);
-    localStorage.removeItem(AUTH0_STORAGE_KEYS.ID_TOKEN);
-    localStorage.removeItem(AUTH0_STORAGE_KEYS.EXPIRES_AT);
-    localStorage.removeItem(CUBIST_USER_ID_KEY);
+    localStorage.removeItem(AUTH_TOKENS_KEY2);
+    localStorage.removeItem(AUTH0_STORAGE_KEYS2.IS_AUTHENTICATED);
+    localStorage.removeItem(AUTH0_STORAGE_KEYS2.ACCESS_TOKEN);
+    localStorage.removeItem(AUTH0_STORAGE_KEYS2.ID_TOKEN);
+    localStorage.removeItem(AUTH0_STORAGE_KEYS2.EXPIRES_AT);
+    localStorage.removeItem(CUBIST_USER_ID_KEY2);
     if (orgId) {
-      const cachedConfigKey = `${ORG_CONFIG_CACHE_KEY}-${orgId}-${env}`;
+      const cachedConfigKey = `${ORG_CONFIG_CACHE_KEY2}-${orgId}-${env}`;
       localStorage.removeItem(cachedConfigKey);
     }
-    sessionStorage.removeItem(OIDC_TOKEN_KEY);
+    sessionStorage.removeItem(OIDC_TOKEN_KEY2);
     setCubistClient(null);
     setCubistError(null);
     setPendingOidcToken(null);
-  }, [sendMessage, orgId, env]);
-  const addAccount = useCallback5(async (accountIndex) => {
+  }, [penpalLogout, orgId, env]);
+  const addAccount = useCallback6(async (accountIndex) => {
     if (!isAuthenticated || !user || !wallet.mnemonicId) {
       throw new Error("User must be authenticated and have a wallet to add an account");
     }
+    if (!authService) {
+      throw new Error("Auth service not connected");
+    }
     const path = getDerivationPath("EVM" /* EVM */, accountIndex);
-    sendMessage({
-      type: "ADD_ACCOUNT",
-      payload: {
-        accountIndex,
-        mnemonicId: wallet.mnemonicId,
-        derivationPath: path,
-        identityProof: {
-          email: user.email,
-          displayName: user.displayName,
-          sub: user.sub,
-          configured_mfa: user.configured_mfa
-        }
+    await authService.addAccount({
+      accountIndex,
+      mnemonicId: wallet.mnemonicId,
+      derivationPath: path,
+      identityProof: {
+        email: user.email,
+        displayName: user.displayName,
+        sub: user.sub,
+        configured_mfa: user.configured_mfa
       }
     });
-  }, [sendMessage, isAuthenticated, user, wallet.mnemonicId]);
+  }, [authService, isAuthenticated, user, wallet.mnemonicId]);
   useEffect5(() => {
     const hasOrgConfig = !!(orgConfig == null ? void 0 : orgConfig.walletProviderOrgID);
     const hasOidcToken = !!pendingOidcToken;
@@ -1860,20 +1849,20 @@ function AvaCloudWalletProvider({
     if (typeof window === "undefined") {
       return;
     }
-    const isAuthenticatedInStorage = localStorage.getItem(AUTH0_STORAGE_KEYS.IS_AUTHENTICATED) === "true";
+    const isAuthenticatedInStorage = localStorage.getItem(AUTH0_STORAGE_KEYS2.IS_AUTHENTICATED) === "true";
     if (!isAuthenticatedInStorage) {
       return;
     }
-    const existingOidcToken = sessionStorage.getItem(OIDC_TOKEN_KEY);
+    const existingOidcToken = sessionStorage.getItem(OIDC_TOKEN_KEY2);
     if (existingOidcToken) {
       setPendingOidcToken(existingOidcToken);
     } else {
       try {
-        const tokensJson = localStorage.getItem(AUTH_TOKENS_KEY);
+        const tokensJson = localStorage.getItem(AUTH_TOKENS_KEY2);
         if (tokensJson) {
           const tokens = JSON.parse(tokensJson);
           if (tokens.access_token) {
-            sessionStorage.setItem(OIDC_TOKEN_KEY, tokens.access_token);
+            sessionStorage.setItem(OIDC_TOKEN_KEY2, tokens.access_token);
             setPendingOidcToken(tokens.access_token);
           }
         }
@@ -1911,7 +1900,7 @@ function useAvaCloudWallet() {
 }
 
 // src/components/LoginButton.tsx
-import { useState as useState8 } from "react";
+import { useState as useState9 } from "react";
 import { Button as Button2, Dialog as Dialog3, DialogContent as DialogContent3, DialogTitle as DialogTitle2 } from "@avalabs/core-k2-components";
 import { Fragment as Fragment2, jsx as jsx8, jsxs as jsxs5 } from "react/jsx-runtime";
 function LoginButton({
@@ -1920,7 +1909,7 @@ function LoginButton({
   ...props
 }) {
   const { isLoading } = useAvaCloudWallet();
-  const [isModalOpen, setIsModalOpen] = useState8(false);
+  const [isModalOpen, setIsModalOpen] = useState9(false);
   const handleOpen = () => setIsModalOpen(true);
   const handleClose = () => setIsModalOpen(false);
   return /* @__PURE__ */ jsxs5(Fragment2, { children: [
@@ -1958,7 +1947,7 @@ function LoginButton({
 }
 
 // src/components/WalletButton.tsx
-import { useState as useState16 } from "react";
+import { useState as useState17 } from "react";
 import {
   Button as Button8,
   Box as Box11,
@@ -1970,7 +1959,7 @@ import {
 } from "@avalabs/core-k2-components";
 
 // src/components/WalletCard.tsx
-import { useState as useState15 } from "react";
+import { useState as useState16 } from "react";
 import {
   Typography as Typography10,
   Box as Box10,
@@ -1985,7 +1974,7 @@ import {
 } from "@avalabs/core-k2-components";
 
 // src/components/SendView.tsx
-import { useState as useState11, useEffect as useEffect6 } from "react";
+import { useState as useState12, useEffect as useEffect6 } from "react";
 import {
   Box as Box3,
   Typography as Typography4,
@@ -2001,7 +1990,7 @@ import {
 import { Icon } from "@iconify/react";
 
 // src/hooks/useTransferTokens.ts
-import { useCallback as useCallback6, useState as useState9 } from "react";
+import { useCallback as useCallback7, useState as useState10 } from "react";
 import { Secp256k1 } from "@cubist-labs/cubesigner-sdk";
 import { useQueryClient } from "@tanstack/react-query";
 import {
@@ -2014,7 +2003,7 @@ import {
   erc20Abi
 } from "viem";
 function useTransferTokens() {
-  const [state, setState] = useState9({
+  const [state, setState] = useState10({
     isLoading: false,
     error: null,
     txHash: null,
@@ -2026,7 +2015,7 @@ function useTransferTokens() {
   const { wallet, cubistClient } = useAvaCloudWallet();
   const { publicClient } = useViem();
   const queryClient2 = useQueryClient();
-  const reset = useCallback6(() => {
+  const reset = useCallback7(() => {
     setState({
       isLoading: false,
       error: null,
@@ -2037,7 +2026,7 @@ function useTransferTokens() {
       actualTotalFee: null
     });
   }, []);
-  const transfer = useCallback6(async (toAddress, amount) => {
+  const transfer = useCallback7(async (toAddress, amount) => {
     var _a;
     if (!publicClient || !cubistClient || !(wallet == null ? void 0 : wallet.address)) {
       setState((prev) => ({
@@ -2123,7 +2112,7 @@ function useTransferTokens() {
       setState((prev) => ({ ...prev, isLoading: false }));
     }
   }, [publicClient, cubistClient, wallet == null ? void 0 : wallet.address, queryClient2]);
-  const transferERC20 = useCallback6(async (tokenAddress, toAddress, amount, decimals) => {
+  const transferERC20 = useCallback7(async (tokenAddress, toAddress, amount, decimals) => {
     var _a;
     if (!publicClient || !cubistClient || !(wallet == null ? void 0 : wallet.address)) {
       setState((prev) => ({
@@ -2226,10 +2215,10 @@ function useTransferTokens() {
 }
 
 // src/hooks/useGasEstimation.ts
-import { useCallback as useCallback7, useState as useState10 } from "react";
+import { useCallback as useCallback8, useState as useState11 } from "react";
 import { formatEther as formatEther2, parseEther as parseEther2 } from "viem";
 function useGasEstimation() {
-  const [state, setState] = useState10({
+  const [state, setState] = useState11({
     isLoading: false,
     error: null,
     baseFee: null,
@@ -2238,7 +2227,7 @@ function useGasEstimation() {
     totalWithAmount: null
   });
   const { publicClient } = useViem();
-  const reset = useCallback7(() => {
+  const reset = useCallback8(() => {
     setState({
       isLoading: false,
       error: null,
@@ -2248,7 +2237,7 @@ function useGasEstimation() {
       totalWithAmount: null
     });
   }, []);
-  const updateTotal = useCallback7((amount) => {
+  const updateTotal = useCallback8((amount) => {
     if (!state.totalFee) return;
     const amountValue = Number.parseFloat(amount);
     if (Number.isNaN(amountValue)) return;
@@ -2258,7 +2247,7 @@ function useGasEstimation() {
       totalWithAmount: newTotal
     }));
   }, [state.totalFee]);
-  const estimateGas = useCallback7(async (toAddress, amount) => {
+  const estimateGas = useCallback8(async (toAddress, amount) => {
     if (!publicClient) {
       setState((prev) => ({
         ...prev,
@@ -2532,7 +2521,7 @@ function SendFormView({
   const { data: tokenBalancesResponse } = useERC20Balances((wallet == null ? void 0 : wallet.address) || void 0, chainId == null ? void 0 : chainId.toString());
   const tokenBalances = tokenBalancesResponse;
   const { baseFee, priorityFee, totalFee, totalWithAmount, estimateGas, updateTotal } = useGasEstimation();
-  const [addressError, setAddressError] = useState11(null);
+  const [addressError, setAddressError] = useState12(null);
   const handleRecipientChange = (value) => {
     if (value && !isAddress2(value)) {
       setAddressError("Invalid address format");
@@ -3060,9 +3049,9 @@ function FailureView({ recipient, amount, currencySymbol, error, onDone }) {
 function SendView({ onBack, onViewStateChange, selectedToken: initialToken }) {
   var _a;
   const { chainId } = useChainId();
-  const [recipient, setRecipient] = useState11("");
-  const [amount, setAmount] = useState11("");
-  const [selectedToken, setSelectedToken] = useState11(initialToken);
+  const [recipient, setRecipient] = useState12("");
+  const [amount, setAmount] = useState12("");
+  const [selectedToken, setSelectedToken] = useState12(initialToken);
   const { transfer, transferERC20, error, isLoading, txHash, viewState, reset, actualBaseFee, actualPriorityFee, actualTotalFee } = useTransferTokens();
   const { data: blockchainInfo } = useBlockchain((chainId == null ? void 0 : chainId.toString()) || "");
   const { wallet } = useAvaCloudWallet();
@@ -3158,7 +3147,7 @@ function SendView({ onBack, onViewStateChange, selectedToken: initialToken }) {
 }
 
 // src/components/ReceiveView.tsx
-import { useState as useState12 } from "react";
+import { useState as useState13 } from "react";
 import { QRCodeSVG } from "qrcode.react";
 import {
   Box as Box4,
@@ -3171,7 +3160,7 @@ import { jsx as jsx12, jsxs as jsxs8 } from "react/jsx-runtime";
 function ReceiveView(_props) {
   const { wallet } = useAvaCloudWallet();
   const { chainId } = useChainId();
-  const [_copied, setCopied] = useState12(false);
+  const [_copied, setCopied] = useState13(false);
   const theme = useTheme2();
   const { isDarkMode } = useThemeMode();
   if (!wallet.address) {
@@ -3251,7 +3240,7 @@ function ReceiveView(_props) {
 }
 
 // src/components/ExportView.tsx
-import { useState as useState13 } from "react";
+import { useState as useState14, useCallback as useCallback9 } from "react";
 import {
   Box as Box5,
   Typography as Typography6,
@@ -3263,32 +3252,27 @@ import {
 } from "@avalabs/core-k2-components";
 import { jsx as jsx13, jsxs as jsxs9 } from "react/jsx-runtime";
 function ExportView({ onBack }) {
-  const { wallet, iframe } = useAvaCloudWallet();
-  const [showKey, setShowKey] = useState13(false);
-  const [copied, setCopied] = useState13(false);
-  const [privateKey, setPrivateKey] = useState13(null);
-  const [error, setError] = useState13(null);
-  const handleExport = async () => {
-    if (!(iframe == null ? void 0 : iframe.contentWindow)) return;
+  const { wallet } = useAvaCloudWallet();
+  const [showKey, _setShowKey] = useState14(false);
+  const [copied, setCopied] = useState14(false);
+  const [privateKey, _setPrivateKey] = useState14(null);
+  const [error, setError] = useState14(null);
+  const [isLoading, setIsLoading] = useState14(false);
+  const handleExport = useCallback9(async () => {
+    if (!wallet.address) {
+      setError("No wallet address available");
+      return;
+    }
+    setIsLoading(true);
+    setError(null);
     try {
-      iframe.contentWindow.postMessage({
-        type: "EXPORT_PRIVATE_KEY",
-        payload: {
-          address: wallet.address
-        }
-      }, "*");
-      const handleResponse = (event) => {
-        if (event.data.type === "EXPORT_PRIVATE_KEY_RESPONSE") {
-          setPrivateKey(event.data.payload.privateKey);
-          setShowKey(true);
-          window.removeEventListener("message", handleResponse);
-        }
-      };
-      window.addEventListener("message", handleResponse);
+      setError("Private key export is not yet available. Please use the wallet provider directly.");
     } catch (err) {
       setError("Failed to export private key. Please try again.");
+    } finally {
+      setIsLoading(false);
     }
-  };
+  }, [wallet.address]);
   const handleCopy = () => {
     if (privateKey) {
       navigator.clipboard.writeText(privateKey);
@@ -3309,8 +3293,9 @@ function ExportView({ onBack }) {
         variant: "contained",
         color: "warning",
         onClick: handleExport,
+        disabled: isLoading,
         sx: { mb: 2 },
-        children: "Show Private Key"
+        children: isLoading ? "Loading..." : "Show Private Key"
       }
     ) : /* @__PURE__ */ jsx13(Box5, { sx: { mb: 3 }, children: /* @__PURE__ */ jsxs9(Box5, { sx: {
       display: "flex",
@@ -3360,7 +3345,7 @@ function ExportView({ onBack }) {
 }
 
 // src/components/TokensView.tsx
-import { useState as useState14 } from "react";
+import { useState as useState15 } from "react";
 import {
   Box as Box8,
   Tabs,
@@ -3760,7 +3745,7 @@ function NonFungibleList() {
 // src/components/TokensView.tsx
 import { jsx as jsx16, jsxs as jsxs12 } from "react/jsx-runtime";
 function TokensView({ onSend }) {
-  const [activeTab, setActiveTab] = useState14("tokens");
+  const [activeTab, setActiveTab] = useState15("tokens");
   const theme = useTheme3();
   const handleCopyAddress = (address) => {
     navigator.clipboard.writeText(address);
@@ -4000,8 +3985,8 @@ import { Fragment as Fragment4, jsx as jsx20, jsxs as jsxs16 } from "react/jsx-r
 function WalletCard({ onClose }) {
   const { user, wallet, isAuthenticated } = useAvaCloudWallet();
   const { balance, isLoadingBalance, currencySymbol, blockchain } = useGlacier();
-  const [currentView, setCurrentView] = useState15("main");
-  const [selectedToken, setSelectedToken] = useState15();
+  const [currentView, setCurrentView] = useState16("main");
+  const [selectedToken, setSelectedToken] = useState16();
   const theme = useTheme4();
   if (!isAuthenticated || !user) return null;
   const handleCopy = (e) => {
@@ -4193,7 +4178,7 @@ function WalletButton({
   ...props
 }) {
   const { isLoading, isAuthenticated, wallet } = useAvaCloudWallet();
-  const [isModalOpen, setIsModalOpen] = useState16(false);
+  const [isModalOpen, setIsModalOpen] = useState17(false);
   const theme = useTheme5();
   const { isDarkMode } = useThemeMode();
   const handleOpen = () => setIsModalOpen(true);
@@ -4277,134 +4262,422 @@ function WalletButton({
                 },
                 children: displayAddress
               }
-            ),
-            /* @__PURE__ */ jsx21(
-              IconButton9,
-              {
-                size: "small",
-                onClick: handleCopy,
-                sx: { color: "text.secondary" },
-                children: /* @__PURE__ */ jsx21(CopyIcon5, {})
+            ),
+            /* @__PURE__ */ jsx21(
+              IconButton9,
+              {
+                size: "small",
+                onClick: handleCopy,
+                sx: { color: "text.secondary" },
+                children: /* @__PURE__ */ jsx21(CopyIcon5, {})
+              }
+            )
+          ] })
+        ]
+      }
+    ),
+    isModalOpen && /* @__PURE__ */ jsx21(WalletCard, { onClose: handleClose })
+  ] });
+}
+
+// src/components/WalletDisplay.tsx
+import { useState as useState18 } from "react";
+import { jsx as jsx22, jsxs as jsxs18 } from "react/jsx-runtime";
+function WalletDisplay({
+  className = "",
+  truncateAddress = true,
+  showAddAccount = true
+}) {
+  const { wallet, addAccount, isAuthenticated } = useAvaCloudWallet();
+  const [isAdding, setIsAdding] = useState18(false);
+  const [accountIndex, setAccountIndex] = useState18(0);
+  if (!isAuthenticated || !wallet.address) {
+    return null;
+  }
+  const displayAddress = truncateAddress ? `${wallet.address.slice(0, 6)}...${wallet.address.slice(-4)}` : wallet.address;
+  const handleAddAccount = async () => {
+    try {
+      setIsAdding(true);
+      await addAccount(accountIndex);
+      setAccountIndex((prev) => prev + 1);
+    } catch (error) {
+      console.error("Failed to add account:", error);
+    } finally {
+      setIsAdding(false);
+    }
+  };
+  return /* @__PURE__ */ jsxs18("div", { className: `space-y-4 ${className}`, children: [
+    /* @__PURE__ */ jsxs18("div", { className: "bg-gray-50 rounded-lg p-4", children: [
+      /* @__PURE__ */ jsx22("div", { className: "text-sm text-gray-500", children: "Wallet Address" }),
+      /* @__PURE__ */ jsx22("div", { className: "mt-1 font-mono text-sm break-all", children: displayAddress })
+    ] }),
+    showAddAccount && /* @__PURE__ */ jsx22(
+      "button",
+      {
+        type: "button",
+        onClick: handleAddAccount,
+        disabled: isAdding,
+        className: "w-full inline-flex items-center justify-center px-4 py-2 border border-transparent text-sm font-medium rounded-md text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500 disabled:opacity-50 disabled:cursor-not-allowed",
+        children: isAdding ? "Adding Account..." : "Add Account"
+      }
+    )
+  ] });
+}
+
+// src/components/UserProfile.tsx
+import { jsx as jsx23, jsxs as jsxs19 } from "react/jsx-runtime";
+function UserProfile({
+  className = "",
+  showLogout = true
+}) {
+  const { user, logout, isAuthenticated } = useAvaCloudWallet();
+  if (!isAuthenticated || !user) {
+    return null;
+  }
+  return /* @__PURE__ */ jsx23("div", { className: `space-y-4 ${className}`, children: /* @__PURE__ */ jsxs19("div", { className: "bg-white shadow rounded-lg p-6", children: [
+    /* @__PURE__ */ jsx23("div", { className: "px-4 py-5 sm:px-6", children: /* @__PURE__ */ jsx23("h3", { className: "text-lg font-medium leading-6 text-gray-900", children: "User Profile" }) }),
+    /* @__PURE__ */ jsx23("div", { className: "border-t border-gray-200", children: /* @__PURE__ */ jsxs19("dl", { children: [
+      /* @__PURE__ */ jsxs19("div", { className: "bg-gray-50 px-4 py-5 sm:grid sm:grid-cols-3 sm:gap-4 sm:px-6", children: [
+        /* @__PURE__ */ jsx23("dt", { className: "text-sm font-medium text-gray-500", children: "Display Name" }),
+        /* @__PURE__ */ jsx23("dd", { className: "mt-1 text-sm text-gray-900 sm:col-span-2", children: user.displayName })
+      ] }),
+      user.email && /* @__PURE__ */ jsxs19("div", { className: "bg-white px-4 py-5 sm:grid sm:grid-cols-3 sm:gap-4 sm:px-6", children: [
+        /* @__PURE__ */ jsx23("dt", { className: "text-sm font-medium text-gray-500", children: "Email address" }),
+        /* @__PURE__ */ jsx23("dd", { className: "mt-1 text-sm text-gray-900 sm:col-span-2", children: user.email })
+      ] }),
+      user.configured_mfa && user.configured_mfa.length > 0 && /* @__PURE__ */ jsxs19("div", { children: [
+        /* @__PURE__ */ jsx23("div", { className: "text-sm font-medium text-gray-500", children: "MFA Methods" }),
+        /* @__PURE__ */ jsx23("div", { className: "mt-1 space-y-1", children: user.configured_mfa.map((method) => {
+          const mfaMethod = typeof method === "string" ? { type: method } : method;
+          return /* @__PURE__ */ jsx23(
+            "div",
+            {
+              className: "text-sm text-gray-900",
+              children: mfaMethod.type === "totp" ? "Authenticator App" : mfaMethod.name
+            },
+            mfaMethod.type === "fido" ? mfaMethod.id : `totp-${mfaMethod.type}`
+          );
+        }) })
+      ] })
+    ] }) }),
+    showLogout && /* @__PURE__ */ jsx23("div", { className: "mt-6", children: /* @__PURE__ */ jsx23(
+      "button",
+      {
+        type: "button",
+        onClick: logout,
+        className: "w-full inline-flex items-center justify-center px-4 py-2 border border-transparent text-sm font-medium rounded-md text-white bg-red-600 hover:bg-red-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-red-500",
+        children: "Sign Out"
+      }
+    ) })
+  ] }) });
+}
+
+// src/hooks/usePostMessage.ts
+import { useCallback as useCallback10, useEffect as useEffect7, useRef as useRef4 } from "react";
+var globalAuthState = {
+  signupInProgress: false,
+  loginInProgress: false,
+  lastSignupTimestamp: 0,
+  lastLoginTimestamp: 0,
+  processingMessageIds: /* @__PURE__ */ new Set()
+};
+function cleanupProcessedMessageIds() {
+  if (globalAuthState.processingMessageIds.size > 100) {
+    const messageIds = Array.from(globalAuthState.processingMessageIds);
+    globalAuthState.processingMessageIds = new Set(messageIds.slice(-50));
+  }
+}
+function usePostMessage({
+  authServiceUrl,
+  orgId,
+  environment,
+  iframe,
+  isIframeReady,
+  onAuthSuccess,
+  onAuthError,
+  onOidcReceived,
+  onOrgConfigUpdate,
+  setIsAuthenticated,
+  setUser,
+  setIsLoading,
+  setIsIframeReady,
+  cubistClient
+}) {
+  const lastAuthStateRef = useRef4({
+    isAuthenticated: false,
+    userId: null,
+    lastUpdateTime: 0
+  });
+  const hasRequestedOidcRef = useRef4(false);
+  const isHandlingMessageRef = useRef4(false);
+  const hasLoadedCacheRef = useRef4(false);
+  useEffect7(() => {
+    if (orgId && onOrgConfigUpdate && !hasLoadedCacheRef.current) {
+      hasLoadedCacheRef.current = true;
+      try {
+        const cachedConfigKey = `${ORG_CONFIG_CACHE_KEY2}-${orgId}-${environment}`;
+        const cachedConfigJson = localStorage.getItem(cachedConfigKey);
+        if (cachedConfigJson) {
+          const cachedConfig = JSON.parse(cachedConfigJson);
+          const timestamp = cachedConfig._timestamp || 0;
+          const isExpired = Date.now() - timestamp > 30 * 60 * 1e3;
+          if (!isExpired) {
+            const { _timestamp, ...configWithoutTimestamp } = cachedConfig;
+            onOrgConfigUpdate(configWithoutTimestamp);
+          }
+        }
+      } catch (error) {
+      }
+    }
+  }, [orgId, environment, onOrgConfigUpdate]);
+  const sendMessage = useCallback10((message) => {
+    if (iframe == null ? void 0 : iframe.contentWindow) {
+      try {
+        if (message.type === "SIGNUP_REQUEST") {
+          if (globalAuthState.signupInProgress) {
+            return;
+          }
+          const now = Date.now();
+          if (now - globalAuthState.lastSignupTimestamp < 3e3) {
+            return;
+          }
+          globalAuthState.signupInProgress = true;
+          globalAuthState.lastSignupTimestamp = now;
+          let finalMessage = message;
+          if (!message.requestId) {
+            finalMessage = {
+              ...message,
+              requestId: `signup-${now}`
+            };
+          }
+          let messageToSend = finalMessage;
+          if (finalMessage.payload && typeof finalMessage.payload.email === "string" && typeof finalMessage.payload.password === "string") {
+            messageToSend = {
+              type: "SIGNUP_REQUEST",
+              email: finalMessage.payload.email,
+              password: finalMessage.payload.password,
+              requestId: finalMessage.requestId || `signup-${now}`
+            };
+          }
+          if ("requestId" in messageToSend && messageToSend.requestId) {
+            globalAuthState.processingMessageIds.add(messageToSend.requestId);
+          }
+          iframe.contentWindow.postMessage(messageToSend, authServiceUrl);
+          return;
+        }
+        if (message.type === "LOGIN_REQUEST") {
+          if (globalAuthState.loginInProgress) {
+            return;
+          }
+          const now = Date.now();
+          if (now - globalAuthState.lastLoginTimestamp < 3e3) {
+            return;
+          }
+          globalAuthState.loginInProgress = true;
+          globalAuthState.lastLoginTimestamp = now;
+          let finalMessage = message;
+          if (!message.requestId) {
+            finalMessage = {
+              ...message,
+              requestId: `login-${now}`
+            };
+          }
+          if (finalMessage.requestId) {
+            globalAuthState.processingMessageIds.add(finalMessage.requestId);
+          }
+          iframe.contentWindow.postMessage(finalMessage, authServiceUrl);
+          return;
+        }
+        iframe.contentWindow.postMessage(message, authServiceUrl);
+      } catch (error) {
+        if (message.type === "SIGNUP_REQUEST") {
+          globalAuthState.signupInProgress = false;
+        }
+        if (message.type === "LOGIN_REQUEST") {
+          globalAuthState.loginInProgress = false;
+        }
+      }
+    }
+  }, [iframe, authServiceUrl]);
+  useEffect7(() => {
+    const handleMessage = async (event) => {
+      var _a, _b, _c, _d, _e, _f, _g;
+      if (isHandlingMessageRef.current) {
+        return;
+      }
+      if (event.origin !== new URL(authServiceUrl).origin) {
+        return;
+      }
+      if (typeof ((_a = event.data) == null ? void 0 : _a.type) !== "string") {
+        return;
+      }
+      if (event.data.requestId && globalAuthState.processingMessageIds.has(event.data.requestId)) {
+        return;
+      }
+      try {
+        isHandlingMessageRef.current = true;
+        if (event.data.type === "ERROR") {
+          globalAuthState.signupInProgress = false;
+          globalAuthState.loginInProgress = false;
+        } else if (event.data.type === "AUTH_STATUS" && event.data.isAuthenticated) {
+          globalAuthState.signupInProgress = false;
+          globalAuthState.loginInProgress = false;
+          cleanupProcessedMessageIds();
+        } else if (event.data.type === "RECEIVE_OIDC") {
+          globalAuthState.signupInProgress = false;
+          globalAuthState.loginInProgress = false;
+        }
+        switch (event.data.type) {
+          case "IFRAME_READY":
+            setIsIframeReady(true);
+            break;
+          case "RECEIVE_OIDC":
+            if (typeof ((_b = event.data.payload) == null ? void 0 : _b.idToken) === "string") {
+              const oidcToken = event.data.payload.idToken;
+              hasRequestedOidcRef.current = false;
+              onOidcReceived == null ? void 0 : onOidcReceived(oidcToken);
+            } else {
+              hasRequestedOidcRef.current = false;
+            }
+            break;
+          case "AUTH_STATUS": {
+            const newIsAuthenticated = !!event.data.isAuthenticated;
+            const newUserId = (_d = (_c = event.data.user) == null ? void 0 : _c.sub) != null ? _d : null;
+            const now = Date.now();
+            if (now - lastAuthStateRef.current.lastUpdateTime < 500) {
+              return;
+            }
+            const authStateChanged = lastAuthStateRef.current.isAuthenticated !== newIsAuthenticated || lastAuthStateRef.current.userId !== newUserId;
+            if (authStateChanged) {
+              setIsAuthenticated(newIsAuthenticated);
+              if (event.data.user) {
+                const userInfo = {
+                  email: event.data.user.email,
+                  sub: event.data.user.sub,
+                  configured_mfa: [],
+                  displayName: event.data.user.nickname || event.data.user.name || ((_e = event.data.user.email) == null ? void 0 : _e.split("@")[0]) || "User",
+                  rawUserData: event.data.user
+                };
+                setUser(userInfo);
+                if (newIsAuthenticated && !cubistClient && !hasRequestedOidcRef.current) {
+                  hasRequestedOidcRef.current = true;
+                  sendMessage({ type: "GET_OIDC" });
+                  return;
+                }
+              } else {
+                setUser(null);
+                localStorage.removeItem(AUTH_TOKENS_KEY2);
+                localStorage.removeItem(AUTH0_STORAGE_KEYS2.IS_AUTHENTICATED);
+                sessionStorage.removeItem(OIDC_TOKEN_KEY2);
+              }
+              lastAuthStateRef.current = {
+                isAuthenticated: newIsAuthenticated,
+                userId: newUserId,
+                lastUpdateTime: now
+              };
+              if (newIsAuthenticated && event.data.user) {
+                if (!hasRequestedOidcRef.current) {
+                  if (event.data.tokens) {
+                    localStorage.setItem(AUTH_TOKENS_KEY2, JSON.stringify(event.data.tokens));
+                  }
+                  onAuthSuccess == null ? void 0 : onAuthSuccess();
+                }
               }
-            )
-          ] })
-        ]
+            }
+            if (event.data.orgConfig && onOrgConfigUpdate) {
+              onOrgConfigUpdate(event.data.orgConfig);
+              if (orgId) {
+                try {
+                  const cachedConfigKey = `${ORG_CONFIG_CACHE_KEY2}-${orgId}-${environment}`;
+                  const configWithTimestamp = {
+                    ...event.data.orgConfig,
+                    _timestamp: Date.now()
+                  };
+                  localStorage.setItem(cachedConfigKey, JSON.stringify(configWithTimestamp));
+                } catch (error) {
+                }
+              }
+            }
+            if (!hasRequestedOidcRef.current) {
+              setIsLoading(false);
+            }
+            break;
+          }
+          case "REGISTER_SUCCESS": {
+            const userId = (_f = event.data.payload) == null ? void 0 : _f.userId;
+            if (userId) {
+              localStorage.setItem(CUBIST_USER_ID_KEY2, userId);
+              if (!hasRequestedOidcRef.current) {
+                hasRequestedOidcRef.current = true;
+                sendMessage({ type: "GET_OIDC" });
+              }
+            }
+            break;
+          }
+          case "ERROR":
+            if (event.data.error === "User not authenticated in iframe") {
+              isHandlingMessageRef.current = false;
+              return;
+            }
+            onAuthError == null ? void 0 : onAuthError(new Error((_g = event.data.error) != null ? _g : "Unknown error"));
+            setIsLoading(false);
+            break;
+        }
+      } finally {
+        isHandlingMessageRef.current = false;
       }
-    ),
-    isModalOpen && /* @__PURE__ */ jsx21(WalletCard, { onClose: handleClose })
-  ] });
-}
-
-// src/components/WalletDisplay.tsx
-import { useState as useState17 } from "react";
-import { jsx as jsx22, jsxs as jsxs18 } from "react/jsx-runtime";
-function WalletDisplay({
-  className = "",
-  truncateAddress = true,
-  showAddAccount = true
-}) {
-  const { wallet, addAccount, isAuthenticated } = useAvaCloudWallet();
-  const [isAdding, setIsAdding] = useState17(false);
-  const [accountIndex, setAccountIndex] = useState17(0);
-  if (!isAuthenticated || !wallet.address) {
-    return null;
-  }
-  const displayAddress = truncateAddress ? `${wallet.address.slice(0, 6)}...${wallet.address.slice(-4)}` : wallet.address;
-  const handleAddAccount = async () => {
-    try {
-      setIsAdding(true);
-      await addAccount(accountIndex);
-      setAccountIndex((prev) => prev + 1);
-    } catch (error) {
-      console.error("Failed to add account:", error);
-    } finally {
-      setIsAdding(false);
+    };
+    window.addEventListener("message", handleMessage);
+    return () => window.removeEventListener("message", handleMessage);
+  }, [
+    authServiceUrl,
+    onAuthError,
+    onAuthSuccess,
+    onOidcReceived,
+    onOrgConfigUpdate,
+    setIsAuthenticated,
+    setIsIframeReady,
+    setIsLoading,
+    setUser,
+    sendMessage,
+    cubistClient,
+    orgId,
+    environment
+  ]);
+  useEffect7(() => {
+    if (isIframeReady && (iframe == null ? void 0 : iframe.contentWindow)) {
+      sendMessage({
+        type: "CHECK_AUTH_STATUS",
+        payload: {
+          orgId,
+          environment
+        }
+      });
     }
+  }, [isIframeReady, iframe, sendMessage, orgId, environment]);
+  return {
+    sendMessage
   };
-  return /* @__PURE__ */ jsxs18("div", { className: `space-y-4 ${className}`, children: [
-    /* @__PURE__ */ jsxs18("div", { className: "bg-gray-50 rounded-lg p-4", children: [
-      /* @__PURE__ */ jsx22("div", { className: "text-sm text-gray-500", children: "Wallet Address" }),
-      /* @__PURE__ */ jsx22("div", { className: "mt-1 font-mono text-sm break-all", children: displayAddress })
-    ] }),
-    showAddAccount && /* @__PURE__ */ jsx22(
-      "button",
-      {
-        type: "button",
-        onClick: handleAddAccount,
-        disabled: isAdding,
-        className: "w-full inline-flex items-center justify-center px-4 py-2 border border-transparent text-sm font-medium rounded-md text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500 disabled:opacity-50 disabled:cursor-not-allowed",
-        children: isAdding ? "Adding Account..." : "Add Account"
-      }
-    )
-  ] });
-}
-
-// src/components/UserProfile.tsx
-import { jsx as jsx23, jsxs as jsxs19 } from "react/jsx-runtime";
-function UserProfile({
-  className = "",
-  showLogout = true
-}) {
-  const { user, logout, isAuthenticated } = useAvaCloudWallet();
-  if (!isAuthenticated || !user) {
-    return null;
-  }
-  return /* @__PURE__ */ jsx23("div", { className: `space-y-4 ${className}`, children: /* @__PURE__ */ jsxs19("div", { className: "bg-white shadow rounded-lg p-6", children: [
-    /* @__PURE__ */ jsx23("div", { className: "px-4 py-5 sm:px-6", children: /* @__PURE__ */ jsx23("h3", { className: "text-lg font-medium leading-6 text-gray-900", children: "User Profile" }) }),
-    /* @__PURE__ */ jsx23("div", { className: "border-t border-gray-200", children: /* @__PURE__ */ jsxs19("dl", { children: [
-      /* @__PURE__ */ jsxs19("div", { className: "bg-gray-50 px-4 py-5 sm:grid sm:grid-cols-3 sm:gap-4 sm:px-6", children: [
-        /* @__PURE__ */ jsx23("dt", { className: "text-sm font-medium text-gray-500", children: "Display Name" }),
-        /* @__PURE__ */ jsx23("dd", { className: "mt-1 text-sm text-gray-900 sm:col-span-2", children: user.displayName })
-      ] }),
-      user.email && /* @__PURE__ */ jsxs19("div", { className: "bg-white px-4 py-5 sm:grid sm:grid-cols-3 sm:gap-4 sm:px-6", children: [
-        /* @__PURE__ */ jsx23("dt", { className: "text-sm font-medium text-gray-500", children: "Email address" }),
-        /* @__PURE__ */ jsx23("dd", { className: "mt-1 text-sm text-gray-900 sm:col-span-2", children: user.email })
-      ] }),
-      user.configured_mfa && user.configured_mfa.length > 0 && /* @__PURE__ */ jsxs19("div", { children: [
-        /* @__PURE__ */ jsx23("div", { className: "text-sm font-medium text-gray-500", children: "MFA Methods" }),
-        /* @__PURE__ */ jsx23("div", { className: "mt-1 space-y-1", children: user.configured_mfa.map((method) => {
-          const mfaMethod = typeof method === "string" ? { type: method } : method;
-          return /* @__PURE__ */ jsx23(
-            "div",
-            {
-              className: "text-sm text-gray-900",
-              children: mfaMethod.type === "totp" ? "Authenticator App" : mfaMethod.name
-            },
-            mfaMethod.type === "fido" ? mfaMethod.id : `totp-${mfaMethod.type}`
-          );
-        }) })
-      ] })
-    ] }) }),
-    showLogout && /* @__PURE__ */ jsx23("div", { className: "mt-6", children: /* @__PURE__ */ jsx23(
-      "button",
-      {
-        type: "button",
-        onClick: logout,
-        className: "w-full inline-flex items-center justify-center px-4 py-2 border border-transparent text-sm font-medium rounded-md text-white bg-red-600 hover:bg-red-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-red-500",
-        children: "Sign Out"
-      }
-    ) })
-  ] }) });
 }
 
 // src/hooks/useSignMessage.ts
-import { useCallback as useCallback8, useState as useState18 } from "react";
+import { useCallback as useCallback11, useState as useState19 } from "react";
 import { Secp256k1 as Secp256k12 } from "@cubist-labs/cubesigner-sdk";
 function useSignMessage() {
-  const [state, setState] = useState18({
+  const [state, setState] = useState19({
     isLoading: false,
     error: null,
     signature: null
   });
   const { wallet, cubistClient } = useAvaCloudWallet();
-  const reset = useCallback8(() => {
+  const reset = useCallback11(() => {
     setState({
       isLoading: false,
       error: null,
       signature: null
     });
   }, []);
-  const signMessage = useCallback8(async (message) => {
+  const signMessage = useCallback11(async (message) => {
     if (!cubistClient || !wallet.address) {
       setState((prev) => ({
         ...prev,
@@ -4441,10 +4714,11 @@ function useSignMessage() {
 }
 
 // src/hooks/useSignTransaction.ts
-import { useCallback as useCallback9, useState as useState19 } from "react";
+import { useCallback as useCallback12, useState as useState20 } from "react";
 import { Secp256k1 as Secp256k13 } from "@cubist-labs/cubesigner-sdk";
+import { toHex } from "viem";
 function useSignTransaction() {
-  const [state, setState] = useState19({
+  const [state, setState] = useState20({
     isLoading: false,
     error: null,
     signature: null,
@@ -4452,7 +4726,7 @@ function useSignTransaction() {
   });
   const { wallet, cubistClient } = useAvaCloudWallet();
   const { publicClient } = useViem();
-  const reset = useCallback9(() => {
+  const reset = useCallback12(() => {
     setState({
       isLoading: false,
       error: null,
@@ -4460,8 +4734,7 @@ function useSignTransaction() {
       signedTransaction: null
     });
   }, []);
-  const signTransaction = useCallback9(async (transaction) => {
-    var _a, _b, _c, _d;
+  const signTransaction = useCallback12(async (transaction) => {
     if (!(wallet == null ? void 0 : wallet.address)) {
       setState((prev) => ({
         ...prev,
@@ -4497,13 +4770,13 @@ function useSignTransaction() {
         chain_id: publicClient.chain.id,
         tx: {
           to: transaction.to || void 0,
-          value: (_a = transaction.value) == null ? void 0 : _a.toString(),
+          value: transaction.value !== void 0 ? toHex(transaction.value) : void 0,
           data: transaction.data || "0x",
-          nonce: (_b = transaction.nonce) == null ? void 0 : _b.toString(),
+          nonce: transaction.nonce !== void 0 ? toHex(transaction.nonce) : void 0,
           type: "0x2",
           // EIP-1559
-          maxFeePerGas: (_c = transaction.maxFeePerGas) == null ? void 0 : _c.toString(),
-          maxPriorityFeePerGas: (_d = transaction.maxPriorityFeePerGas) == null ? void 0 : _d.toString()
+          maxFeePerGas: transaction.maxFeePerGas !== void 0 ? toHex(transaction.maxFeePerGas) : void 0,
+          maxPriorityFeePerGas: transaction.maxPriorityFeePerGas !== void 0 ? toHex(transaction.maxPriorityFeePerGas) : void 0
         }
       };
       const sig = await key.signEvm(signReq);
@@ -4529,11 +4802,11 @@ function useSignTransaction() {
 }
 
 // src/hooks/useUserWallets.ts
-import { useCallback as useCallback10, useState as useState20 } from "react";
+import { useCallback as useCallback13, useState as useState21 } from "react";
 function useUserWallets() {
-  const [error, setError] = useState20(null);
-  const [isLoading, setIsLoading] = useState20(false);
-  const getWallets = useCallback10(async (client) => {
+  const [error, setError] = useState21(null);
+  const [isLoading, setIsLoading] = useState21(false);
+  const getWallets = useCallback13(async (client) => {
     setIsLoading(true);
     setError(null);
     try {
@@ -4573,15 +4846,30 @@ function avaCloudWallet() {
     id: "avaCloudWallet",
     name: "AvaCloud Wallet",
     type: "injected",
-    async connect() {
+    async connect(parameters) {
+      const { withCapabilities } = parameters != null ? parameters : {};
       const { walletClient } = useViem();
       if (!walletClient) {
         throw new Error("AvaCloud Wallet not connected");
       }
       const accounts = await this.getAccounts();
       const chainId = await this.getChainId();
+      if (withCapabilities) {
+        const result = {
+          accounts: accounts.map((address) => ({
+            address,
+            capabilities: {}
+          })),
+          chainId
+        };
+        config.emitter.emit("connect", { accounts, chainId });
+        return result;
+      }
       config.emitter.emit("connect", { accounts, chainId });
-      return { accounts, chainId };
+      return {
+        accounts,
+        chainId
+      };
     },
     async disconnect() {
       config.emitter.emit("disconnect");
@@ -4628,7 +4916,7 @@ function avaCloudWallet() {
 }
 
 // src/providers/GaslessProvider.tsx
-import { createContext as createContext5, useContext as useContext5, useEffect as useEffect7, useState as useState21 } from "react";
+import { createContext as createContext5, useContext as useContext5, useEffect as useEffect8, useState as useState22 } from "react";
 import { jsx as jsx24 } from "react/jsx-runtime";
 function validateGaslessConfig(config) {
   if (!config || typeof config !== "object") {
@@ -4664,13 +4952,13 @@ function validateGaslessConfig(config) {
 }
 var GaslessContext = createContext5(null);
 function GaslessProvider({ children, config, fetchParams }) {
-  const [state, setState] = useState21({
+  const [state, setState] = useState22({
     isLoading: false,
     error: null,
     config: null
   });
   const { authServiceUrl, environment } = useAvaCloudWallet();
-  useEffect7(() => {
+  useEffect8(() => {
     if (config) {
       const validationError = validateGaslessConfig(config);
       if (validationError) {
@@ -4757,9 +5045,16 @@ function GaslessProvider({ children, config, fetchParams }) {
   }, [config, fetchParams, authServiceUrl, environment]);
   return /* @__PURE__ */ jsx24(GaslessContext.Provider, { value: state, children });
 }
+function useGaslessConfig() {
+  const ctx = useContext5(GaslessContext);
+  if (!ctx) {
+    throw new Error("useGaslessConfig must be used within a GaslessProvider");
+  }
+  return ctx;
+}
 
 // src/hooks/useGaslessTransaction.ts
-import { useCallback as useCallback11, useState as useState22 } from "react";
+import { useCallback as useCallback14, useState as useState23 } from "react";
 import * as ethers from "ethers";
 import axios from "axios";
 import { Secp256k1 as Secp256k14 } from "@cubist-labs/cubesigner-sdk";
@@ -4785,7 +5080,7 @@ var FORWARDER_GET_NONCE_ABI = [
   }
 ];
 function useGaslessTransaction({ gaslessConfig, contractAddress: defaultContractAddress, abi: defaultAbi }) {
-  const [state, setState] = useState22({
+  const [state, setState] = useState23({
     isLoading: false,
     error: null,
     txHash: null
@@ -4793,14 +5088,14 @@ function useGaslessTransaction({ gaslessConfig, contractAddress: defaultContract
   const config = gaslessConfig;
   const { wallet, cubistClient } = useAvaCloudWallet();
   useViem();
-  const reset = useCallback11(() => {
+  const reset = useCallback14(() => {
     setState({
       isLoading: false,
       error: null,
       txHash: null
     });
   }, []);
-  const validateConfig = useCallback11((config2) => {
+  const validateConfig = useCallback14((config2) => {
     if (!config2) {
       return "Gasless configuration is not available. Please ensure GaslessProvider is properly configured.";
     }
@@ -4834,7 +5129,7 @@ function useGaslessTransaction({ gaslessConfig, contractAddress: defaultContract
     }
     return null;
   }, []);
-  const sendGaslessTransaction = useCallback11(async ({
+  const sendGaslessTransaction = useCallback14(async ({
     functionName,
     args = [],
     abi: overrideAbi,
@@ -4919,7 +5214,12 @@ function useGaslessTransaction({ gaslessConfig, contractAddress: defaultContract
         const suffixParts = config.suffix.match(/^(\w+)\s+(.+)\)$/);
         if (suffixParts) {
           const [, , suffixName] = suffixParts;
-          message[suffixName] = Buffer.from(config.suffix, "utf8");
+          const encoder = new TextEncoder();
+          const suffixBytes = encoder.encode(config.suffix);
+          const paddedBytes = new Uint8Array(32);
+          paddedBytes.set(suffixBytes.slice(0, 32));
+          const hexString = Array.from(paddedBytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+          message[suffixName] = "0x" + hexString;
         }
       }
       const domain = {
@@ -4928,12 +5228,22 @@ function useGaslessTransaction({ gaslessConfig, contractAddress: defaultContract
         chainId: (await provider.getNetwork()).chainId,
         verifyingContract: config.forwarderAddress
       };
-      const digest = ethers.utils._TypedDataEncoder.hash(domain, {
-        [config.requestType]: types[config.requestType]
-      }, message);
       const key = await cubistClient.org().getKeyByMaterialId(Secp256k14.Evm, wallet.address);
-      const sigResp = await key.signBlob({
-        message_base64: Buffer.from(digest.slice(2), "hex").toString("base64")
+      const sigResp = await key.signEip712({
+        chain_id: domain.chainId,
+        typed_data: {
+          domain: {
+            name: domain.name,
+            version: domain.version,
+            chainId: `0x${domain.chainId.toString(16)}`,
+            verifyingContract: domain.verifyingContract
+          },
+          primaryType: config.requestType,
+          types: {
+            [config.requestType]: types[config.requestType]
+          },
+          message
+        }
       });
       const signatureData = sigResp.data().signature;
       const signature = signatureData.startsWith("0x") ? signatureData : `0x${signatureData}`;
@@ -5023,6 +5333,7 @@ export {
   useAvaCloudWallet,
   useBlockchain,
   useChainId,
+  useGaslessConfig,
   useGaslessTransaction,
   useGlacier,
   usePostMessage,