@bounded-sh/client 0.0.105 → 0.0.107

package/dist/{index-Bu6vnwxM.mjs → index-DbXoOlIa.mjs}

@@ -1,4 +1,4 @@
-import { getConfig, getActiveSessionManager, WebSessionManager, ReactNativeSessionManager, revokeSession, init as init$1, reconnectWithNewAuth, onSessionCleared, deriveUserIdentityFromIdToken, subscribe, getFreshAuthToken, getSessionGeneration, getIdToken as getIdToken$1, genAuthNonce, genSolanaMessage, createSessionWithSignature } from '@bounded-sh/core';
+import { getConfig, getActiveSessionManager, WebSessionManager, ReactNativeSessionManager, revokeSession, reconnectWithNewAuth, init as init$2, deriveUserIdentityFromIdToken, onSessionCleared, subscribe, getFreshAuthToken, getSessionGeneration, getIdToken as getIdToken$1, genAuthNonce, genSolanaMessage, createSessionWithSignature } from '@bounded-sh/core';
 import * as React from 'react';
 
 function walletContextFromClaims(claims, baseUrl, expectedAppId, tenantOrigin) {
@@ -6160,7 +6160,7 @@ async function getAuthProvider(config) {
             // manager as legacy email sessions. Human login should be started
             // with loginWithRedirect(); this provider is kept as the restore and
             // logout surface for those sessions.
-            currentAuthProvider = new (await import('./email-auth-provider-sA_9RTRl.mjs')).EmailAuthProvider();
+            currentAuthProvider = new (await import('./email-auth-provider-BPeQo6xL.mjs')).EmailAuthProvider();
             break;
         case "phantom": {
             // First-class Solana WALLET LOGIN (the poof/TaroBase-style "connect
@@ -6202,7 +6202,7 @@ async function getAuthProvider(config) {
             // (bounded-login-widget.ts), so registration never counts as
             // evidence the user has a wallet.
             await ensureSolanaMobileWalletRegistered(config, configuredNetwork);
-            const { InjectedWalletProvider } = await import('./injected-wallet-provider-BDCLkdR_.mjs');
+            const { InjectedWalletProvider } = await import('./injected-wallet-provider-D-Pq9QVK.mjs');
             currentAuthProvider = new InjectedWalletProvider(resolveInjectedWalletConfig(config), rpcUrl, configuredNetwork);
             break;
         }
@@ -6215,7 +6215,7 @@ async function getAuthProvider(config) {
             // Selecting authMethod:'evm-wallet' IS the opt-in — pass evmWalletConfig
             // to point at a specific wallet or set chainId/domain.
             const evmWalletConfig = ((_a = config.evmWalletConfig) !== null && _a !== void 0 ? _a : {});
-            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-BuDISWSq.mjs');
+            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-BjqqLfPD.mjs');
             currentAuthProvider = new InjectedEvmWalletProvider(evmWalletConfig);
             break;
         }
@@ -6240,7 +6240,7 @@ async function getAuthProvider(config) {
             break;
         case "guest":
             // Anonymous auth: a device-local ed25519 keypair signs the challenge.
-            currentAuthProvider = new (await import('./guest-auth-provider-1mrlNF2G.mjs')).GuestAuthProvider();
+            currentAuthProvider = new (await import('./guest-auth-provider-BIohNOHi.mjs')).GuestAuthProvider();
             break;
     }
     if (!currentAuthProvider) {
@@ -6302,7 +6302,7 @@ async function signInAnonymously() {
     // Lazy-load the guest provider so its ed25519/web3 dependencies stay out of
     // the main bundle for data-only apps. Specifier is a static string literal
     // so bundle-splitting can see it.
-    const provider = new (await import('./guest-auth-provider-1mrlNF2G.mjs')).GuestAuthProvider();
+    const provider = new (await import('./guest-auth-provider-BIohNOHi.mjs')).GuestAuthProvider();
     setAuthLoading(true); // reflect "signing in…" while the guest keypair session is minted
     // adoptSessionProvider awaits only getConfig() (already resolved here) and then
     // runs every write - provider/method/config/marker/user - in one synchronous
@@ -6473,7 +6473,7 @@ function ensureSharedWalletLoginReady() {
     if (!sharedWalletReady) {
         sharedWalletReady = (async () => {
             await getConfig();
-            await import('./injected-wallet-provider-BDCLkdR_.mjs');
+            await import('./injected-wallet-provider-D-Pq9QVK.mjs');
         })().catch((error) => {
             sharedWalletReady = null;
             throw error;
@@ -6576,7 +6576,7 @@ async function loginWithWallet(options) {
         await ensureSharedWalletLoginReady();
     else
         await ensureWalletLoginReady();
-    const { InjectedWalletProvider } = await import('./injected-wallet-provider-BDCLkdR_.mjs');
+    const { InjectedWalletProvider } = await import('./injected-wallet-provider-D-Pq9QVK.mjs');
     // Keep the RAW wallet provider: the offchain wrapper forwards only a fixed
     // set of methods, so cleanup below must speak to the provider that actually
     // holds the config rather than to whatever is wrapping it.
@@ -6941,7 +6941,7 @@ async function initialize(newConfig) {
         // Get auth provider first
         authProviderInstance = await getAuthProvider(newConfig);
         // Initialize config with auth provider
-        await init$1(Object.assign(Object.assign({}, newConfig), { authProvider: authProviderInstance }));
+        await init$2(Object.assign(Object.assign({}, newConfig), { authProvider: authProviderInstance }));
         // A return establishes its own provider/session, or hands off a popup.
         // Restoring the old provider afterwards would overwrite the new login.
         try {
@@ -7013,7 +7013,7 @@ function sameConfigValue(a, b, seen = new WeakMap()) {
     return left.length === right.length && left.every((key) => Object.prototype.hasOwnProperty.call(b, key)
         && sameConfigValue(a[key], b[key], seen));
 }
-function init(newConfig) {
+function init$1(newConfig) {
     if (initializingConfig) {
         if (sameConfigValue(initializingConfig, newConfig)) {
             return authReadyPromise;
@@ -7155,6 +7155,51 @@ function setAuthProviderInstance(provider) {
     authProviderInstance = provider;
 }
 
+/**
+ * The text OpenApps templates carry where an app id belongs, the one the platform names
+ * STARTER_MAIN_APP_ID_PLACEHOLDER (shared/starter-app-id.ts). Never a real id.
+ *
+ * Matched by a pattern and never spelled out, here or in a comment: bounded-host refuses a
+ * Hermes release whose built output carries that text anywhere (hermes-release.ts,
+ * `app_id_placeholder`), and every app that bundles this SDK would carry it. A regex source
+ * reaches the bundle as written, where a string assembled from parts can be folded back into
+ * the literal by a minifier.
+ */
+const APP_ID_PLACEHOLDER = /^REPLACE_WITH_MAIN_APP_I[D]$/;
+/** Whether `value` is the template placeholder rather than an app id. */
+function isAppIdPlaceholder(value) {
+    return APP_ID_PLACEHOLDER.test(value);
+}
+const NETWORKS = new Set(['bounded', 'bounded-staging', 'bounded-production']);
+// Bounded hosting states which app a page is: `<meta name="bounded-app-id">`
+// and `<meta name="bounded-network">`, first in <head> of every page it serves,
+// so the first tag of each name is the host's (docs/app-identity.md). Outside a
+// browser there is no page to read.
+function pageMeta(name) {
+    var _a, _b;
+    if (typeof document === 'undefined' || typeof document.querySelector !== 'function')
+        return undefined;
+    const value = (_b = (_a = document.querySelector(`meta[name="${name}"]`)) === null || _a === void 0 ? void 0 : _a.getAttribute('content')) === null || _b === void 0 ? void 0 : _b.trim();
+    return value || undefined;
+}
+/**
+ * The configuration init() runs with. An explicit appId keeps the call exactly
+ * as written. Without one (or with the template placeholder), a page served by
+ * Bounded supplies its app id, and its network unless the call names one, so
+ * code in any framework can call init() without carrying an id in its source.
+ */
+function withHostedIdentity(config) {
+    if (config.appId && !isAppIdPlaceholder(config.appId))
+        return config;
+    const appId = pageMeta('bounded-app-id');
+    if (!appId || isAppIdPlaceholder(appId)) {
+        throw new Error('No app ID provided. Pass init({ appId }), or serve this page from Bounded hosting, '
+            + 'which states it in <meta name="bounded-app-id">.');
+    }
+    const network = config.network === undefined ? pageMeta('bounded-network') : undefined;
+    return Object.assign(Object.assign(Object.assign({}, config), { appId }), (network && NETWORKS.has(network) ? { network: network } : {}));
+}
+
 // bounded-widget-ownership.ts - per-open ownership generation for the singleton
 // login/signing modal (bounded-widget-modal.ts).
 //
@@ -10941,5 +10986,21 @@ async function connectServiceSession(ticket, options) {
     }
 }
 
+/**
+ * Initialize the SDK. A page served by Bounded already states which app it is,
+ * so `init()` there needs no `appId`; pass one to run anywhere else (another
+ * host, local development). An explicit `appId` is used exactly as given.
+ */
+function init(config = {}) {
+    let resolved;
+    try {
+        resolved = withHostedIdentity(config);
+    }
+    catch (error) {
+        return Promise.reject(error);
+    }
+    return init$1(resolved);
+}
+
 export { onrampStatus as $, getAuthProvider as A, signInAnonymously as B, loginWithPrivy as C, loginWithWallet as D, ensureWalletLoginReady as E, ensureSharedWalletLoginReady as F, preloadWalletLogin as G, loginWithRedirect as H, completeLoginFromRedirect as I, getLoginReturnError as J, loginWithPopup as K, openBoundedWidget as L, ensureSignedIn as M, useAuth as N, useQuery as O, useBuildRun as P, apps as Q, signSolanaMessageViaTurnkey as R, getOrCreateTurnkeyWallet as S, openTurnkeyKeyExport as T, getTurnkeyWalletSessionState as U, getTurnkeyWalletRecoveryUrl as V, WalletConfigError as W, startTurnkeyEmailLogin as X, getIdToken as Y, onramp as Z, onrampQuote as _, signMessageWithTurnkey as a, setPlatform as a0, OffchainAuthProvider as a1, PrivyExpoProvider as a2, requestEip6963Providers as a3, connectBroadcast as a4, connectServiceSession as a5, builds as a6, BuildsApiError as a7, mediaAgentTools as a8, NON_TERMINAL_STATES as a9, TERMINAL_STATES as aa, RUN_STATES as ab, PARK_REASONS as ac, FAILURE_REASONS as ad, BUILD_REVIEW_CAPABILITY_SCHEMA as ae, BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA as af, BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA as ag, signTransactionWithTurnkey as b, signTransactionV1WithTurnkey as c, signAndSubmitTransactionWithTurnkey as d, bs58 as e, defaultInjectedProvider as f, getPlatform as g, hasTurnkeyWallet as h, firstStandardWalletProvider as i, setAuthLoading as j, bufferExports as k, setStoredAuthMethod as l, confirmAndCheckTransaction as m, normalizeSolanaRpcUrl as n, defaultInjectedEvmProvider as o, init as p, getCurrentUser as q, resolveSolanaRpcUrl as r, setCurrentUser as s, transactionHasSignature as t, onAuthStateChanged as u, onAuthLoadingChanged as v, getAuthLoading as w, waitForAuthReady as x, login as y, logout as z };
-//# sourceMappingURL=index-Bu6vnwxM.mjs.map
+//# sourceMappingURL=index-DbXoOlIa.mjs.map