@bounded-sh/client 0.0.112-ux-audit.2 → 0.0.113

package/dist/index.native.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var index_native = require('./index.native-ingNhWPw.js');
+var index_native = require('./index.native-DJSOqyKQ.js');
 var core = require('@bounded-sh/core');
 require('react');
 

package/dist/index.native.mjs

@@ -1,4 +1,4 @@
-export { a1 as BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA, a0 as BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA, $ as BUILD_REVIEW_CAPABILITY_SCHEMA, U as BuildsApiError, _ as FAILURE_REASONS, W as NON_TERMINAL_STATES, R as OffchainAuthProvider, Z as PARK_REASONS, S as PrivyExpoProvider, Y as RUN_STATES, X as TERMINAL_STATES, L as apps, T as builds, F as completeLoginFromRedirect, x as getAuthLoading, B as getAuthProvider, u as getCurrentUser, M as getIdToken, G as getLoginReturnError, g as getPlatform, q as init, z as login, H as loginWithPopup, D as loginWithPrivy, E as loginWithRedirect, A as logout, V as mediaAgentTools, w as onAuthLoadingChanged, v as onAuthStateChanged, N as onramp, O as onrampQuote, P as onrampStatus, Q as setPlatform, C as signInAnonymously, I as useAuth, K as useBuildRun, J as useQuery, y as waitForAuthReady } from './index.native-CAH_ks0s.mjs';
+export { a3 as BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA, a2 as BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA, a1 as BUILD_REVIEW_CAPABILITY_SCHEMA, W as BuildsApiError, a0 as FAILURE_REASONS, Y as NON_TERMINAL_STATES, T as OffchainAuthProvider, $ as PARK_REASONS, U as PrivyExpoProvider, _ as RUN_STATES, Z as TERMINAL_STATES, N as apps, V as builds, H as completeLoginFromRedirect, z as getAuthLoading, D as getAuthProvider, v as getCurrentUser, O as getIdToken, I as getLoginReturnError, g as getPlatform, u as init, B as login, J as loginWithPopup, F as loginWithPrivy, G as loginWithRedirect, C as logout, X as mediaAgentTools, y as onAuthLoadingChanged, x as onAuthStateChanged, P as onramp, Q as onrampQuote, R as onrampStatus, S as setPlatform, E as signInAnonymously, K as useAuth, M as useBuildRun, L as useQuery, A as waitForAuthReady } from './index.native-DcW2klyn.mjs';
 export * from '@bounded-sh/core';
 export { AppTokenExchangeError, BoundedDeclineError, DECLINE_EVENT_NAME, ScopedClientReadOnlyError, aggregate, clearAppTokenCache, count, createAppTokenAuthHeaders, createClient, deriveDecline, dispatchDeclineEvent, docId, exchangeAppToken, get, getConfig, getFiles, getMany, queryAggregate, reconcileSetResult, runExpression, runExpressionMany, runQuery, runQueryMany, search, set, setFile, setMany, signAndSubmitTransaction, signMessage, signTransaction, subscribe, waitForSetResult } from '@bounded-sh/core';
 import 'react';

package/dist/{injected-evm-wallet-provider-Cao1U0NZ.js → injected-evm-wallet-provider-BDYWjIOQ.js}

@@ -1,7 +1,7 @@
 'use strict';
 
 var core = require('@bounded-sh/core');
-var index_native = require('./index.native-ingNhWPw.js');
+var index_native = require('./index.native-DJSOqyKQ.js');
 require('react');
 
 // injected-evm-wallet-types.ts — tiny, dependency-free surface for the EVM
@@ -252,4 +252,4 @@ InjectedEvmWalletProvider.instance = null;
 
 exports.InjectedEvmWalletProvider = InjectedEvmWalletProvider;
 exports.defaultInjectedEvmProvider = defaultInjectedEvmProvider;
-//# sourceMappingURL=injected-evm-wallet-provider-Cao1U0NZ.js.map
+//# sourceMappingURL=injected-evm-wallet-provider-BDYWjIOQ.js.map

package/dist/{injected-evm-wallet-provider-Cao1U0NZ.js.map → injected-evm-wallet-provider-BDYWjIOQ.js.map}

@@ -1 +1 @@
-{"version":3,"file":"injected-evm-wallet-provider-Cao1U0NZ.js","sources":["../.rollup-tmp/auth/providers/injected-evm-wallet-types.js","../.rollup-tmp/auth/providers/injected-evm-wallet-provider.js"],"sourcesContent":["// injected-evm-wallet-types.ts — tiny, dependency-free surface for the EVM\n// WALLET LOGIN path (BYO wallet via SIWE). The EVM twin of\n// injected-wallet-types.ts: kept separate from injected-evm-wallet-provider.ts\n// so the SDK entry can eagerly export the type surface + the provider-discovery\n// helper WITHOUT dragging the provider class into the default bundle. The\n// provider is lazy-loaded by getAuthProvider() when an app opts into\n// authMethod:'evm-wallet'.\n//\n// It rides the standard EIP-1193 injected provider a browser wallet exposes\n// (MetaMask / Rabby / Coinbase Wallet / any window.ethereum), discovered via\n// EIP-6963 (multi-wallet, collision-free) with a window.ethereum fallback. It\n// needs NO viem/ethers and NO React — EIP-1193 request() + hex strings suffice.\n// EIP-6963 is announcement-based: wallets add an `eip6963:requestProvider`\n// listener and synchronously dispatch `eip6963:announceProvider` in response. We\n// keep a persistent collector so announcements (including late ones) are\n// captured, and re-request on demand.\nconst announcedProviders = [];\nlet announceListenerAttached = false;\nfunction attachAnnounceListener() {\n    if (announceListenerAttached || typeof window === 'undefined')\n        return;\n    announceListenerAttached = true;\n    window.addEventListener('eip6963:announceProvider', (event) => {\n        const detail = event === null || event === void 0 ? void 0 : event.detail;\n        if (detail &&\n            detail.provider &&\n            typeof detail.provider.request === 'function' &&\n            !announcedProviders.some((d) => { var _a, _b; return ((_a = d.info) === null || _a === void 0 ? void 0 : _a.uuid) === ((_b = detail.info) === null || _b === void 0 ? void 0 : _b.uuid); })) {\n            announcedProviders.push(detail);\n        }\n    });\n}\n/**\n * Request + collect EIP-6963 providers. Dispatches `eip6963:requestProvider`\n * (synchronous — already-loaded wallets announce in the same tick) and returns\n * every wallet announced so far. Kept synchronous so it works inside a user\n * gesture and can be eagerly exported from the SDK entry.\n */\nexport function requestEip6963Providers() {\n    if (typeof window === 'undefined')\n        return [];\n    attachAnnounceListener();\n    try {\n        window.dispatchEvent(new Event('eip6963:requestProvider'));\n    }\n    catch (_a) {\n        /* older browsers without Event constructor — fall through to window.ethereum */\n    }\n    return announcedProviders.slice();\n}\n/**\n * Default EVM provider discovery: EIP-6963 first (multi-wallet, collision-free),\n * then legacy `window.ethereum`. Returns null when no injected wallet is present.\n */\nexport function defaultInjectedEvmProvider() {\n    if (typeof window === 'undefined')\n        return null;\n    const details = requestEip6963Providers();\n    if (details.length > 0)\n        return details[0].provider;\n    const eth = window.ethereum;\n    if (eth && typeof eth.request === 'function')\n        return eth;\n    return null;\n}\n","import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSiweMessage, getConfig, normalizeEvmAddress, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { setStoredAuthMethod } from '../stored-auth-method';\nimport { defaultInjectedEvmProvider, } from './injected-evm-wallet-types';\n// Re-export the type surface + discovery helper for callers who import the\n// provider module directly.\nexport { defaultInjectedEvmProvider };\n// Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,\n// so clearIncompatibleSession() keeps (not wipes) this session on the next init().\nconst INJECTED_EVM_AUTH_METHOD = 'evm-wallet';\n// The /session issuer's discriminator for the SIWE (EIP-4361 secp256k1) exchange.\nconst SIWE_SESSION_METHOD = 'siwe';\nconst NO_WALLET_ERR = 'No injected EVM wallet found. Install a wallet like MetaMask (metamask.io) or Rabby and try again, ' +\n    'or pass config.evmWalletConfig.getProvider to point at your wallet.';\nconst NO_SOL_TX_ERR = 'EVM wallet login is a LOGIN-ONLY surface (SIWE + personal_sign) and has no Solana ' +\n    'transaction surface: signTransaction/signAndSubmitTransaction are unavailable.';\nfunction normalizeConfig(config) {\n    if (config.chainId !== undefined && (!Number.isSafeInteger(config.chainId) || config.chainId <= 0)) {\n        throw new Error('EVM wallet chainId must be a positive safe integer');\n    }\n    return Object.assign({}, config);\n}\nexport class InjectedEvmWalletProvider {\n    constructor(config = {}) {\n        this.authenticatedAddress = null;\n        if (typeof window === 'undefined') {\n            throw new Error('InjectedEvmWalletProvider can only be instantiated in a browser environment');\n        }\n        const normalized = normalizeConfig(config);\n        // Singleton so the SDK reuses one instance (mirrors the other providers).\n        if (InjectedEvmWalletProvider.instance) {\n            InjectedEvmWalletProvider.instance.config = normalized;\n            InjectedEvmWalletProvider.instance.authenticatedAddress = null;\n            return InjectedEvmWalletProvider.instance;\n        }\n        this.config = normalized;\n        InjectedEvmWalletProvider.instance = this;\n    }\n    // @user.address (the Solana wallet) is null for an EVM-wallet login: the user\n    // authenticated with an EVM wallet and has no Solana address. User.address is\n    // typed `string | null`, so this is a plain null, not a cast.\n    evmUser(address) {\n        return { id: address, address: null, evmAddress: address, provider: this };\n    }\n    resolveProvider() {\n        var _a;\n        const provider = (_a = (this.config.getProvider ? this.config.getProvider() : null)) !== null && _a !== void 0 ? _a : defaultInjectedEvmProvider();\n        if (!provider)\n            throw new Error(NO_WALLET_ERR);\n        return provider;\n    }\n    /** Connect the injected wallet and return its canonical lowercase EVM address. */\n    async connectAddress(provider) {\n        const accounts = await provider.request({ method: 'eth_requestAccounts' });\n        const raw = Array.isArray(accounts) ? accounts[0] : undefined;\n        const address = normalizeEvmAddress(raw);\n        if (!address)\n            throw new Error('Wallet did not return a valid EVM address on connect');\n        return address;\n    }\n    /** Current chain id the wallet is connected to (EIP-155 number), or null. */\n    async currentChainId(provider) {\n        try {\n            const hex = await provider.request({ method: 'eth_chainId' });\n            if (typeof hex !== 'string' || !/^0x[0-9a-fA-F]+$/.test(hex))\n                return null;\n            const n = Number(BigInt(hex));\n            return Number.isSafeInteger(n) && n > 0 ? n : null;\n        }\n        catch (_a) {\n            return null;\n        }\n    }\n    async login() {\n        var _a;\n        setAuthLoading(true);\n        try {\n            const provider = this.resolveProvider();\n            const address = await this.connectAddress(provider);\n            // Reuse a still-valid session for THIS wallet.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === address) {\n                const user = this.evmUser(address);\n                this.authenticatedAddress = address;\n                setCurrentUser(user);\n                this.markAuthMethod();\n                return user;\n            }\n            // SIWE: nonce -> canonical EIP-4361 prompt -> the wallet personal_sign's it.\n            const nonce = await genAuthNonce();\n            const appId = (await getConfig()).appId;\n            const chainId = (_a = this.config.chainId) !== null && _a !== void 0 ? _a : await this.currentChainId(provider);\n            if (chainId === null)\n                throw new Error('Could not verify the EVM wallet chain for SIWE login');\n            const message = genSiweMessage(address, nonce, appId, this.resolveDomain(), this.resolveUri(), { chainId });\n            // personal_sign(message, address) -> 0x r‖s‖v hex (the shape the\n            // bounded-auth verifier's recoverSiweSigner consumes). The raw UTF-8\n            // message is signed under the EIP-191 envelope the verifier hashes.\n            const signature = await provider.request({\n                method: 'personal_sign',\n                params: [message, address],\n            });\n            const result = await createSessionWithSignature(address, message, signature, SIWE_SESSION_METHOD);\n            await SessionManager().storeSession(address, result.accessToken, result.idToken, result.refreshToken);\n            this.markAuthMethod();\n            const user = this.evmUser(address);\n            this.authenticatedAddress = address;\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    resolveDomain() {\n        const actual = window.location.host.toLowerCase();\n        if (this.config.domain && this.config.domain.toLowerCase() !== actual) {\n            throw new Error('SIWE domain override must match the current browser origin');\n        }\n        return actual;\n    }\n    resolveUri() {\n        const actual = window.location.origin.toLowerCase();\n        if (this.config.uri) {\n            let configured;\n            try {\n                configured = new URL(this.config.uri).origin.toLowerCase();\n            }\n            catch (_a) {\n                throw new Error('SIWE URI override must be an absolute URL');\n            }\n            if (configured !== actual)\n                throw new Error('SIWE URI override must match the current browser origin');\n        }\n        return actual;\n    }\n    markAuthMethod() {\n        setStoredAuthMethod(INJECTED_EVM_AUTH_METHOD);\n    }\n    async restoreSession(beforeCommit) {\n        const session = await SessionManager().getSession();\n        beforeCommit === null || beforeCommit === void 0 ? void 0 : beforeCommit();\n        if (!session)\n            return null;\n        // An EVM-wallet session stores the EVM address as its address; @user.address\n        // (the Solana wallet) is null for this login.\n        const address = normalizeEvmAddress(session.address);\n        if (!address) {\n            await SessionManager().clearSession();\n            return null;\n        }\n        this.authenticatedAddress = address;\n        const user = this.evmUser(address);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // EIP-1193 has no standard disconnect; clearing the Bounded session is the\n        // logout. (wallet_revokePermissions is non-standard/opt-in — skip it.)\n        await SessionManager().clearSession();\n        this.authenticatedAddress = null;\n        setCurrentUser(null);\n    }\n    // --- Signing surface -------------------------------------------------------\n    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */\n    async signMessage(message) {\n        const provider = this.resolveProvider();\n        const address = await this.connectAddress(provider);\n        if (!this.authenticatedAddress || address !== this.authenticatedAddress) {\n            throw new Error('The connected EVM wallet account changed after login. Sign in again before signing.');\n        }\n        return provider.request({ method: 'personal_sign', params: [message, address] });\n    }\n    // Solana-typed methods are structurally unsupported on an EVM wallet, and\n    // this provider is login-only, so there is no transaction surface at all.\n    async signTransaction(_transaction) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async signAndSubmitTransaction(_transaction, _feePayer) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async getNativeMethods() {\n        return this.resolveProvider();\n    }\n}\nInjectedEvmWalletProvider.instance = null;\n"],"names":["normalizeEvmAddress","setAuthLoading","SessionManager","setCurrentUser","genAuthNonce","getConfig","genSiweMessage","createSessionWithSignature","setStoredAuthMethod"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,kBAAkB,GAAG,EAAE;AAC7B,IAAI,wBAAwB,GAAG,KAAK;AACpC,SAAS,sBAAsB,GAAG;AAClC,IAAI,IAAI,wBAAwB,IAAI,OAAO,MAAM,KAAK,WAAW;AACjE,QAAQ;AACR,IAAI,wBAAwB,GAAG,IAAI;AACnC,IAAI,MAAM,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,CAAC,KAAK,KAAK;AACnE,QAAQ,MAAM,MAAM,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;AACjF,QAAQ,IAAI,MAAM;AAClB,YAAY,MAAM,CAAC,QAAQ;AAC3B,YAAY,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU;AACzD,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;AACzM,YAAY,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;AAC3C,QAAQ;AACR,IAAI,CAAC,CAAC;AACN;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,uBAAuB,GAAG;AAC1C,IAAI,IAAI,OAAO,MAAM,KAAK,WAAW;AACrC,QAAQ,OAAO,EAAE;AACjB,IAAI,sBAAsB,EAAE;AAC5B,IAAI,IAAI;AACR,QAAQ,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAClE,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf;AACA,IAAI;AACJ,IAAI,OAAO,kBAAkB,CAAC,KAAK,EAAE;AACrC;AACA;AACA;AACA;AACA;AACO,SAAS,0BAA0B,GAAG;AAC7C,IAAI,IAAI,OAAO,MAAM,KAAK,WAAW;AACrC,QAAQ,OAAO,IAAI;AACnB,IAAI,MAAM,OAAO,GAAG,uBAAuB,EAAE;AAC7C,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;AAC1B,QAAQ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ;AAClC,IAAI,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ;AAC/B,IAAI,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU;AAChD,QAAQ,OAAO,GAAG;AAClB,IAAI,OAAO,IAAI;AACf;;ACzDA;AACA;AACA,MAAM,wBAAwB,GAAG,YAAY;AAC7C;AACA,MAAM,mBAAmB,GAAG,MAAM;AAClC,MAAM,aAAa,GAAG,qGAAqG;AAC3H,IAAI,qEAAqE;AACzE,MAAM,aAAa,GAAG,oFAAoF;AAC1G,IAAI,gFAAgF;AACpF,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE;AACxG,QAAQ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC7E,IAAI;AACJ,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;AACpC;AACO,MAAM,yBAAyB,CAAC;AACvC,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE;AAC7B,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AAC3C,YAAY,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC;AAC1G,QAAQ;AACR,QAAQ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;AAClD;AACA,QAAQ,IAAI,yBAAyB,CAAC,QAAQ,EAAE;AAChD,YAAY,yBAAyB,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU;AAClE,YAAY,yBAAyB,CAAC,QAAQ,CAAC,oBAAoB,GAAG,IAAI;AAC1E,YAAY,OAAO,yBAAyB,CAAC,QAAQ;AACrD,QAAQ;AACR,QAAQ,IAAI,CAAC,MAAM,GAAG,UAAU;AAChC,QAAQ,yBAAyB,CAAC,QAAQ,GAAG,IAAI;AACjD,IAAI;AACJ;AACA;AACA;AACA,IAAI,OAAO,CAAC,OAAO,EAAE;AACrB,QAAQ,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;AAClF,IAAI;AACJ,IAAI,eAAe,GAAG;AACtB,QAAQ,IAAI,EAAE;AACd,QAAQ,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,0BAA0B,EAAE;AAC1J,QAAQ,IAAI,CAAC,QAAQ;AACrB,YAAY,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AAC1C,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAClF,QAAQ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS;AACrE,QAAQ,MAAM,OAAO,GAAGA,wBAAmB,CAAC,GAAG,CAAC;AAChD,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACnF,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACzE,YAAY,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACxE,gBAAgB,OAAO,IAAI;AAC3B,YAAY,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzC,YAAY,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI;AAC9D,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,IAAI,EAAE;AACd,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AACnD,YAAY,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC/D;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMC,4BAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE;AAC1D,gBAAgB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAClD,gBAAgB,IAAI,CAAC,oBAAoB,GAAG,OAAO;AACnD,gBAAgBC,2BAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,IAAI,CAAC,cAAc,EAAE;AACrC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAMC,iBAAY,EAAE;AAC9C,YAAY,MAAM,KAAK,GAAG,CAAC,MAAMC,cAAS,EAAE,EAAE,KAAK;AACnD,YAAY,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3H,YAAY,IAAI,OAAO,KAAK,IAAI;AAChC,gBAAgB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACvF,YAAY,MAAM,OAAO,GAAGC,mBAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACvH;AACA;AACA;AACA,YAAY,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACrD,gBAAgB,MAAM,EAAE,eAAe;AACvC,gBAAgB,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;AAC1C,aAAa,CAAC;AACd,YAAY,MAAM,MAAM,GAAG,MAAMC,+BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC;AAC7G,YAAY,MAAML,4BAAc,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACjH,YAAY,IAAI,CAAC,cAAc,EAAE;AACjC,YAAY,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC9C,YAAY,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC/C,YAAYC,2BAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAYF,2BAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,aAAa,GAAG;AACpB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACzD,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;AAC/E,YAAY,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACzF,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,UAAU,GAAG;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;AAC3D,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;AAC7B,YAAY,IAAI,UAAU;AAC1B,YAAY,IAAI;AAChB,gBAAgB,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;AAC1E,YAAY;AACZ,YAAY,OAAO,EAAE,EAAE;AACvB,gBAAgB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;AAC5E,YAAY;AACZ,YAAY,IAAI,UAAU,KAAK,MAAM;AACrC,gBAAgB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC;AAC1F,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,cAAc,GAAG;AACrB,QAAQO,gCAAmB,CAAC,wBAAwB,CAAC;AACrD,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,YAAY,EAAE;AACvC,QAAQ,MAAM,OAAO,GAAG,MAAMN,4BAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,GAAG,MAAM,GAAG,YAAY,EAAE;AAClF,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB;AACA;AACA,QAAQ,MAAM,OAAO,GAAGF,wBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;AAC5D,QAAQ,IAAI,CAAC,OAAO,EAAE;AACtB,YAAY,MAAME,4BAAc,EAAE,CAAC,YAAY,EAAE;AACjD,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC3C,QAAQ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1C,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQ,MAAMD,4BAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AAC/C,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3D,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,KAAK,IAAI,CAAC,oBAAoB,EAAE;AACjF,YAAY,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,IAAI;AACJ;AACA;AACA,IAAI,MAAM,eAAe,CAAC,YAAY,EAAE;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,YAAY,EAAE,SAAS,EAAE;AAC5D,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,IAAI,CAAC,eAAe,EAAE;AACrC,IAAI;AACJ;AACA,yBAAyB,CAAC,QAAQ,GAAG,IAAI;;;;;"}
+{"version":3,"file":"injected-evm-wallet-provider-BDYWjIOQ.js","sources":["../.rollup-tmp/auth/providers/injected-evm-wallet-types.js","../.rollup-tmp/auth/providers/injected-evm-wallet-provider.js"],"sourcesContent":["// injected-evm-wallet-types.ts — tiny, dependency-free surface for the EVM\n// WALLET LOGIN path (BYO wallet via SIWE). The EVM twin of\n// injected-wallet-types.ts: kept separate from injected-evm-wallet-provider.ts\n// so the SDK entry can eagerly export the type surface + the provider-discovery\n// helper WITHOUT dragging the provider class into the default bundle. The\n// provider is lazy-loaded by getAuthProvider() when an app opts into\n// authMethod:'evm-wallet'.\n//\n// It rides the standard EIP-1193 injected provider a browser wallet exposes\n// (MetaMask / Rabby / Coinbase Wallet / any window.ethereum), discovered via\n// EIP-6963 (multi-wallet, collision-free) with a window.ethereum fallback. It\n// needs NO viem/ethers and NO React — EIP-1193 request() + hex strings suffice.\n// EIP-6963 is announcement-based: wallets add an `eip6963:requestProvider`\n// listener and synchronously dispatch `eip6963:announceProvider` in response. We\n// keep a persistent collector so announcements (including late ones) are\n// captured, and re-request on demand.\nconst announcedProviders = [];\nlet announceListenerAttached = false;\nfunction attachAnnounceListener() {\n    if (announceListenerAttached || typeof window === 'undefined')\n        return;\n    announceListenerAttached = true;\n    window.addEventListener('eip6963:announceProvider', (event) => {\n        const detail = event === null || event === void 0 ? void 0 : event.detail;\n        if (detail &&\n            detail.provider &&\n            typeof detail.provider.request === 'function' &&\n            !announcedProviders.some((d) => { var _a, _b; return ((_a = d.info) === null || _a === void 0 ? void 0 : _a.uuid) === ((_b = detail.info) === null || _b === void 0 ? void 0 : _b.uuid); })) {\n            announcedProviders.push(detail);\n        }\n    });\n}\n/**\n * Request + collect EIP-6963 providers. Dispatches `eip6963:requestProvider`\n * (synchronous — already-loaded wallets announce in the same tick) and returns\n * every wallet announced so far. Kept synchronous so it works inside a user\n * gesture and can be eagerly exported from the SDK entry.\n */\nexport function requestEip6963Providers() {\n    if (typeof window === 'undefined')\n        return [];\n    attachAnnounceListener();\n    try {\n        window.dispatchEvent(new Event('eip6963:requestProvider'));\n    }\n    catch (_a) {\n        /* older browsers without Event constructor — fall through to window.ethereum */\n    }\n    return announcedProviders.slice();\n}\n/**\n * Default EVM provider discovery: EIP-6963 first (multi-wallet, collision-free),\n * then legacy `window.ethereum`. Returns null when no injected wallet is present.\n */\nexport function defaultInjectedEvmProvider() {\n    if (typeof window === 'undefined')\n        return null;\n    const details = requestEip6963Providers();\n    if (details.length > 0)\n        return details[0].provider;\n    const eth = window.ethereum;\n    if (eth && typeof eth.request === 'function')\n        return eth;\n    return null;\n}\n","import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSiweMessage, getConfig, normalizeEvmAddress, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { setStoredAuthMethod } from '../stored-auth-method';\nimport { defaultInjectedEvmProvider, } from './injected-evm-wallet-types';\n// Re-export the type surface + discovery helper for callers who import the\n// provider module directly.\nexport { defaultInjectedEvmProvider };\n// Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,\n// so clearIncompatibleSession() keeps (not wipes) this session on the next init().\nconst INJECTED_EVM_AUTH_METHOD = 'evm-wallet';\n// The /session issuer's discriminator for the SIWE (EIP-4361 secp256k1) exchange.\nconst SIWE_SESSION_METHOD = 'siwe';\nconst NO_WALLET_ERR = 'No injected EVM wallet found. Install a wallet like MetaMask (metamask.io) or Rabby and try again, ' +\n    'or pass config.evmWalletConfig.getProvider to point at your wallet.';\nconst NO_SOL_TX_ERR = 'EVM wallet login is a LOGIN-ONLY surface (SIWE + personal_sign) and has no Solana ' +\n    'transaction surface: signTransaction/signAndSubmitTransaction are unavailable.';\nfunction normalizeConfig(config) {\n    if (config.chainId !== undefined && (!Number.isSafeInteger(config.chainId) || config.chainId <= 0)) {\n        throw new Error('EVM wallet chainId must be a positive safe integer');\n    }\n    return Object.assign({}, config);\n}\nexport class InjectedEvmWalletProvider {\n    constructor(config = {}) {\n        this.authenticatedAddress = null;\n        if (typeof window === 'undefined') {\n            throw new Error('InjectedEvmWalletProvider can only be instantiated in a browser environment');\n        }\n        const normalized = normalizeConfig(config);\n        // Singleton so the SDK reuses one instance (mirrors the other providers).\n        if (InjectedEvmWalletProvider.instance) {\n            InjectedEvmWalletProvider.instance.config = normalized;\n            InjectedEvmWalletProvider.instance.authenticatedAddress = null;\n            return InjectedEvmWalletProvider.instance;\n        }\n        this.config = normalized;\n        InjectedEvmWalletProvider.instance = this;\n    }\n    // @user.address (the Solana wallet) is null for an EVM-wallet login: the user\n    // authenticated with an EVM wallet and has no Solana address. User.address is\n    // typed `string | null`, so this is a plain null, not a cast.\n    evmUser(address) {\n        return { id: address, address: null, evmAddress: address, provider: this };\n    }\n    resolveProvider() {\n        var _a;\n        const provider = (_a = (this.config.getProvider ? this.config.getProvider() : null)) !== null && _a !== void 0 ? _a : defaultInjectedEvmProvider();\n        if (!provider)\n            throw new Error(NO_WALLET_ERR);\n        return provider;\n    }\n    /** Connect the injected wallet and return its canonical lowercase EVM address. */\n    async connectAddress(provider) {\n        const accounts = await provider.request({ method: 'eth_requestAccounts' });\n        const raw = Array.isArray(accounts) ? accounts[0] : undefined;\n        const address = normalizeEvmAddress(raw);\n        if (!address)\n            throw new Error('Wallet did not return a valid EVM address on connect');\n        return address;\n    }\n    /** Current chain id the wallet is connected to (EIP-155 number), or null. */\n    async currentChainId(provider) {\n        try {\n            const hex = await provider.request({ method: 'eth_chainId' });\n            if (typeof hex !== 'string' || !/^0x[0-9a-fA-F]+$/.test(hex))\n                return null;\n            const n = Number(BigInt(hex));\n            return Number.isSafeInteger(n) && n > 0 ? n : null;\n        }\n        catch (_a) {\n            return null;\n        }\n    }\n    async login() {\n        var _a;\n        setAuthLoading(true);\n        try {\n            const provider = this.resolveProvider();\n            const address = await this.connectAddress(provider);\n            // Reuse a still-valid session for THIS wallet.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === address) {\n                const user = this.evmUser(address);\n                this.authenticatedAddress = address;\n                setCurrentUser(user);\n                this.markAuthMethod();\n                return user;\n            }\n            // SIWE: nonce -> canonical EIP-4361 prompt -> the wallet personal_sign's it.\n            const nonce = await genAuthNonce();\n            const appId = (await getConfig()).appId;\n            const chainId = (_a = this.config.chainId) !== null && _a !== void 0 ? _a : await this.currentChainId(provider);\n            if (chainId === null)\n                throw new Error('Could not verify the EVM wallet chain for SIWE login');\n            const message = genSiweMessage(address, nonce, appId, this.resolveDomain(), this.resolveUri(), { chainId });\n            // personal_sign(message, address) -> 0x r‖s‖v hex (the shape the\n            // bounded-auth verifier's recoverSiweSigner consumes). The raw UTF-8\n            // message is signed under the EIP-191 envelope the verifier hashes.\n            const signature = await provider.request({\n                method: 'personal_sign',\n                params: [message, address],\n            });\n            const result = await createSessionWithSignature(address, message, signature, SIWE_SESSION_METHOD);\n            await SessionManager().storeSession(address, result.accessToken, result.idToken, result.refreshToken);\n            this.markAuthMethod();\n            const user = this.evmUser(address);\n            this.authenticatedAddress = address;\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    resolveDomain() {\n        const actual = window.location.host.toLowerCase();\n        if (this.config.domain && this.config.domain.toLowerCase() !== actual) {\n            throw new Error('SIWE domain override must match the current browser origin');\n        }\n        return actual;\n    }\n    resolveUri() {\n        const actual = window.location.origin.toLowerCase();\n        if (this.config.uri) {\n            let configured;\n            try {\n                configured = new URL(this.config.uri).origin.toLowerCase();\n            }\n            catch (_a) {\n                throw new Error('SIWE URI override must be an absolute URL');\n            }\n            if (configured !== actual)\n                throw new Error('SIWE URI override must match the current browser origin');\n        }\n        return actual;\n    }\n    markAuthMethod() {\n        setStoredAuthMethod(INJECTED_EVM_AUTH_METHOD);\n    }\n    async restoreSession(beforeCommit) {\n        const session = await SessionManager().getSession();\n        beforeCommit === null || beforeCommit === void 0 ? void 0 : beforeCommit();\n        if (!session)\n            return null;\n        // An EVM-wallet session stores the EVM address as its address; @user.address\n        // (the Solana wallet) is null for this login.\n        const address = normalizeEvmAddress(session.address);\n        if (!address) {\n            await SessionManager().clearSession();\n            return null;\n        }\n        this.authenticatedAddress = address;\n        const user = this.evmUser(address);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // EIP-1193 has no standard disconnect; clearing the Bounded session is the\n        // logout. (wallet_revokePermissions is non-standard/opt-in — skip it.)\n        await SessionManager().clearSession();\n        this.authenticatedAddress = null;\n        setCurrentUser(null);\n    }\n    // --- Signing surface -------------------------------------------------------\n    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */\n    async signMessage(message) {\n        const provider = this.resolveProvider();\n        const address = await this.connectAddress(provider);\n        if (!this.authenticatedAddress || address !== this.authenticatedAddress) {\n            throw new Error('The connected EVM wallet account changed after login. Sign in again before signing.');\n        }\n        return provider.request({ method: 'personal_sign', params: [message, address] });\n    }\n    // Solana-typed methods are structurally unsupported on an EVM wallet, and\n    // this provider is login-only, so there is no transaction surface at all.\n    async signTransaction(_transaction) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async signAndSubmitTransaction(_transaction, _feePayer) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async getNativeMethods() {\n        return this.resolveProvider();\n    }\n}\nInjectedEvmWalletProvider.instance = null;\n"],"names":["normalizeEvmAddress","setAuthLoading","SessionManager","setCurrentUser","genAuthNonce","getConfig","genSiweMessage","createSessionWithSignature","setStoredAuthMethod"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,kBAAkB,GAAG,EAAE;AAC7B,IAAI,wBAAwB,GAAG,KAAK;AACpC,SAAS,sBAAsB,GAAG;AAClC,IAAI,IAAI,wBAAwB,IAAI,OAAO,MAAM,KAAK,WAAW;AACjE,QAAQ;AACR,IAAI,wBAAwB,GAAG,IAAI;AACnC,IAAI,MAAM,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,CAAC,KAAK,KAAK;AACnE,QAAQ,MAAM,MAAM,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;AACjF,QAAQ,IAAI,MAAM;AAClB,YAAY,MAAM,CAAC,QAAQ;AAC3B,YAAY,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU;AACzD,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;AACzM,YAAY,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;AAC3C,QAAQ;AACR,IAAI,CAAC,CAAC;AACN;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,uBAAuB,GAAG;AAC1C,IAAI,IAAI,OAAO,MAAM,KAAK,WAAW;AACrC,QAAQ,OAAO,EAAE;AACjB,IAAI,sBAAsB,EAAE;AAC5B,IAAI,IAAI;AACR,QAAQ,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAClE,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf;AACA,IAAI;AACJ,IAAI,OAAO,kBAAkB,CAAC,KAAK,EAAE;AACrC;AACA;AACA;AACA;AACA;AACO,SAAS,0BAA0B,GAAG;AAC7C,IAAI,IAAI,OAAO,MAAM,KAAK,WAAW;AACrC,QAAQ,OAAO,IAAI;AACnB,IAAI,MAAM,OAAO,GAAG,uBAAuB,EAAE;AAC7C,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;AAC1B,QAAQ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ;AAClC,IAAI,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ;AAC/B,IAAI,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU;AAChD,QAAQ,OAAO,GAAG;AAClB,IAAI,OAAO,IAAI;AACf;;ACzDA;AACA;AACA,MAAM,wBAAwB,GAAG,YAAY;AAC7C;AACA,MAAM,mBAAmB,GAAG,MAAM;AAClC,MAAM,aAAa,GAAG,qGAAqG;AAC3H,IAAI,qEAAqE;AACzE,MAAM,aAAa,GAAG,oFAAoF;AAC1G,IAAI,gFAAgF;AACpF,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE;AACxG,QAAQ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC7E,IAAI;AACJ,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;AACpC;AACO,MAAM,yBAAyB,CAAC;AACvC,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE;AAC7B,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AAC3C,YAAY,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC;AAC1G,QAAQ;AACR,QAAQ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;AAClD;AACA,QAAQ,IAAI,yBAAyB,CAAC,QAAQ,EAAE;AAChD,YAAY,yBAAyB,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU;AAClE,YAAY,yBAAyB,CAAC,QAAQ,CAAC,oBAAoB,GAAG,IAAI;AAC1E,YAAY,OAAO,yBAAyB,CAAC,QAAQ;AACrD,QAAQ;AACR,QAAQ,IAAI,CAAC,MAAM,GAAG,UAAU;AAChC,QAAQ,yBAAyB,CAAC,QAAQ,GAAG,IAAI;AACjD,IAAI;AACJ;AACA;AACA;AACA,IAAI,OAAO,CAAC,OAAO,EAAE;AACrB,QAAQ,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;AAClF,IAAI;AACJ,IAAI,eAAe,GAAG;AACtB,QAAQ,IAAI,EAAE;AACd,QAAQ,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,0BAA0B,EAAE;AAC1J,QAAQ,IAAI,CAAC,QAAQ;AACrB,YAAY,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AAC1C,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAClF,QAAQ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS;AACrE,QAAQ,MAAM,OAAO,GAAGA,wBAAmB,CAAC,GAAG,CAAC;AAChD,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACnF,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACzE,YAAY,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACxE,gBAAgB,OAAO,IAAI;AAC3B,YAAY,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzC,YAAY,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI;AAC9D,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,IAAI,EAAE;AACd,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AACnD,YAAY,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC/D;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMC,4BAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE;AAC1D,gBAAgB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAClD,gBAAgB,IAAI,CAAC,oBAAoB,GAAG,OAAO;AACnD,gBAAgBC,2BAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,IAAI,CAAC,cAAc,EAAE;AACrC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAMC,iBAAY,EAAE;AAC9C,YAAY,MAAM,KAAK,GAAG,CAAC,MAAMC,cAAS,EAAE,EAAE,KAAK;AACnD,YAAY,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3H,YAAY,IAAI,OAAO,KAAK,IAAI;AAChC,gBAAgB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACvF,YAAY,MAAM,OAAO,GAAGC,mBAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACvH;AACA;AACA;AACA,YAAY,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACrD,gBAAgB,MAAM,EAAE,eAAe;AACvC,gBAAgB,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;AAC1C,aAAa,CAAC;AACd,YAAY,MAAM,MAAM,GAAG,MAAMC,+BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC;AAC7G,YAAY,MAAML,4BAAc,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACjH,YAAY,IAAI,CAAC,cAAc,EAAE;AACjC,YAAY,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC9C,YAAY,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC/C,YAAYC,2BAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAYF,2BAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,aAAa,GAAG;AACpB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACzD,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;AAC/E,YAAY,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACzF,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,UAAU,GAAG;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;AAC3D,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;AAC7B,YAAY,IAAI,UAAU;AAC1B,YAAY,IAAI;AAChB,gBAAgB,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;AAC1E,YAAY;AACZ,YAAY,OAAO,EAAE,EAAE;AACvB,gBAAgB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;AAC5E,YAAY;AACZ,YAAY,IAAI,UAAU,KAAK,MAAM;AACrC,gBAAgB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC;AAC1F,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,cAAc,GAAG;AACrB,QAAQO,gCAAmB,CAAC,wBAAwB,CAAC;AACrD,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,YAAY,EAAE;AACvC,QAAQ,MAAM,OAAO,GAAG,MAAMN,4BAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,GAAG,MAAM,GAAG,YAAY,EAAE;AAClF,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB;AACA;AACA,QAAQ,MAAM,OAAO,GAAGF,wBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;AAC5D,QAAQ,IAAI,CAAC,OAAO,EAAE;AACtB,YAAY,MAAME,4BAAc,EAAE,CAAC,YAAY,EAAE;AACjD,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC3C,QAAQ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1C,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQ,MAAMD,4BAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AAC/C,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3D,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,KAAK,IAAI,CAAC,oBAAoB,EAAE;AACjF,YAAY,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,IAAI;AACJ;AACA;AACA,IAAI,MAAM,eAAe,CAAC,YAAY,EAAE;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,YAAY,EAAE,SAAS,EAAE;AAC5D,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,IAAI,CAAC,eAAe,EAAE;AACrC,IAAI;AACJ;AACA,yBAAyB,CAAC,QAAQ,GAAG,IAAI;;;;;"}

package/dist/{injected-evm-wallet-provider-DXjwPjLW.mjs → injected-evm-wallet-provider-BQ_kG1vI.mjs}

@@ -1,5 +1,5 @@
 import { normalizeEvmAddress, getActiveSessionManager, genAuthNonce, getConfig, genSiweMessage, createSessionWithSignature } from '@bounded-sh/core';
-import { k as setAuthLoading, s as setCurrentUser, m as setStoredAuthMethod } from './index.native-CAH_ks0s.mjs';
+import { l as setAuthLoading, s as setCurrentUser, o as setStoredAuthMethod } from './index.native-DcW2klyn.mjs';
 import 'react';
 
 // injected-evm-wallet-types.ts — tiny, dependency-free surface for the EVM
@@ -249,4 +249,4 @@ class InjectedEvmWalletProvider {
 InjectedEvmWalletProvider.instance = null;
 
 export { InjectedEvmWalletProvider, defaultInjectedEvmProvider };
-//# sourceMappingURL=injected-evm-wallet-provider-DXjwPjLW.mjs.map
+//# sourceMappingURL=injected-evm-wallet-provider-BQ_kG1vI.mjs.map

package/dist/{injected-evm-wallet-provider-DXjwPjLW.mjs.map → injected-evm-wallet-provider-BQ_kG1vI.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"injected-evm-wallet-provider-DXjwPjLW.mjs","sources":["../.rollup-tmp/auth/providers/injected-evm-wallet-types.js","../.rollup-tmp/auth/providers/injected-evm-wallet-provider.js"],"sourcesContent":["// injected-evm-wallet-types.ts — tiny, dependency-free surface for the EVM\n// WALLET LOGIN path (BYO wallet via SIWE). The EVM twin of\n// injected-wallet-types.ts: kept separate from injected-evm-wallet-provider.ts\n// so the SDK entry can eagerly export the type surface + the provider-discovery\n// helper WITHOUT dragging the provider class into the default bundle. The\n// provider is lazy-loaded by getAuthProvider() when an app opts into\n// authMethod:'evm-wallet'.\n//\n// It rides the standard EIP-1193 injected provider a browser wallet exposes\n// (MetaMask / Rabby / Coinbase Wallet / any window.ethereum), discovered via\n// EIP-6963 (multi-wallet, collision-free) with a window.ethereum fallback. It\n// needs NO viem/ethers and NO React — EIP-1193 request() + hex strings suffice.\n// EIP-6963 is announcement-based: wallets add an `eip6963:requestProvider`\n// listener and synchronously dispatch `eip6963:announceProvider` in response. We\n// keep a persistent collector so announcements (including late ones) are\n// captured, and re-request on demand.\nconst announcedProviders = [];\nlet announceListenerAttached = false;\nfunction attachAnnounceListener() {\n    if (announceListenerAttached || typeof window === 'undefined')\n        return;\n    announceListenerAttached = true;\n    window.addEventListener('eip6963:announceProvider', (event) => {\n        const detail = event === null || event === void 0 ? void 0 : event.detail;\n        if (detail &&\n            detail.provider &&\n            typeof detail.provider.request === 'function' &&\n            !announcedProviders.some((d) => { var _a, _b; return ((_a = d.info) === null || _a === void 0 ? void 0 : _a.uuid) === ((_b = detail.info) === null || _b === void 0 ? void 0 : _b.uuid); })) {\n            announcedProviders.push(detail);\n        }\n    });\n}\n/**\n * Request + collect EIP-6963 providers. Dispatches `eip6963:requestProvider`\n * (synchronous — already-loaded wallets announce in the same tick) and returns\n * every wallet announced so far. Kept synchronous so it works inside a user\n * gesture and can be eagerly exported from the SDK entry.\n */\nexport function requestEip6963Providers() {\n    if (typeof window === 'undefined')\n        return [];\n    attachAnnounceListener();\n    try {\n        window.dispatchEvent(new Event('eip6963:requestProvider'));\n    }\n    catch (_a) {\n        /* older browsers without Event constructor — fall through to window.ethereum */\n    }\n    return announcedProviders.slice();\n}\n/**\n * Default EVM provider discovery: EIP-6963 first (multi-wallet, collision-free),\n * then legacy `window.ethereum`. Returns null when no injected wallet is present.\n */\nexport function defaultInjectedEvmProvider() {\n    if (typeof window === 'undefined')\n        return null;\n    const details = requestEip6963Providers();\n    if (details.length > 0)\n        return details[0].provider;\n    const eth = window.ethereum;\n    if (eth && typeof eth.request === 'function')\n        return eth;\n    return null;\n}\n","import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSiweMessage, getConfig, normalizeEvmAddress, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { setStoredAuthMethod } from '../stored-auth-method';\nimport { defaultInjectedEvmProvider, } from './injected-evm-wallet-types';\n// Re-export the type surface + discovery helper for callers who import the\n// provider module directly.\nexport { defaultInjectedEvmProvider };\n// Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,\n// so clearIncompatibleSession() keeps (not wipes) this session on the next init().\nconst INJECTED_EVM_AUTH_METHOD = 'evm-wallet';\n// The /session issuer's discriminator for the SIWE (EIP-4361 secp256k1) exchange.\nconst SIWE_SESSION_METHOD = 'siwe';\nconst NO_WALLET_ERR = 'No injected EVM wallet found. Install a wallet like MetaMask (metamask.io) or Rabby and try again, ' +\n    'or pass config.evmWalletConfig.getProvider to point at your wallet.';\nconst NO_SOL_TX_ERR = 'EVM wallet login is a LOGIN-ONLY surface (SIWE + personal_sign) and has no Solana ' +\n    'transaction surface: signTransaction/signAndSubmitTransaction are unavailable.';\nfunction normalizeConfig(config) {\n    if (config.chainId !== undefined && (!Number.isSafeInteger(config.chainId) || config.chainId <= 0)) {\n        throw new Error('EVM wallet chainId must be a positive safe integer');\n    }\n    return Object.assign({}, config);\n}\nexport class InjectedEvmWalletProvider {\n    constructor(config = {}) {\n        this.authenticatedAddress = null;\n        if (typeof window === 'undefined') {\n            throw new Error('InjectedEvmWalletProvider can only be instantiated in a browser environment');\n        }\n        const normalized = normalizeConfig(config);\n        // Singleton so the SDK reuses one instance (mirrors the other providers).\n        if (InjectedEvmWalletProvider.instance) {\n            InjectedEvmWalletProvider.instance.config = normalized;\n            InjectedEvmWalletProvider.instance.authenticatedAddress = null;\n            return InjectedEvmWalletProvider.instance;\n        }\n        this.config = normalized;\n        InjectedEvmWalletProvider.instance = this;\n    }\n    // @user.address (the Solana wallet) is null for an EVM-wallet login: the user\n    // authenticated with an EVM wallet and has no Solana address. User.address is\n    // typed `string | null`, so this is a plain null, not a cast.\n    evmUser(address) {\n        return { id: address, address: null, evmAddress: address, provider: this };\n    }\n    resolveProvider() {\n        var _a;\n        const provider = (_a = (this.config.getProvider ? this.config.getProvider() : null)) !== null && _a !== void 0 ? _a : defaultInjectedEvmProvider();\n        if (!provider)\n            throw new Error(NO_WALLET_ERR);\n        return provider;\n    }\n    /** Connect the injected wallet and return its canonical lowercase EVM address. */\n    async connectAddress(provider) {\n        const accounts = await provider.request({ method: 'eth_requestAccounts' });\n        const raw = Array.isArray(accounts) ? accounts[0] : undefined;\n        const address = normalizeEvmAddress(raw);\n        if (!address)\n            throw new Error('Wallet did not return a valid EVM address on connect');\n        return address;\n    }\n    /** Current chain id the wallet is connected to (EIP-155 number), or null. */\n    async currentChainId(provider) {\n        try {\n            const hex = await provider.request({ method: 'eth_chainId' });\n            if (typeof hex !== 'string' || !/^0x[0-9a-fA-F]+$/.test(hex))\n                return null;\n            const n = Number(BigInt(hex));\n            return Number.isSafeInteger(n) && n > 0 ? n : null;\n        }\n        catch (_a) {\n            return null;\n        }\n    }\n    async login() {\n        var _a;\n        setAuthLoading(true);\n        try {\n            const provider = this.resolveProvider();\n            const address = await this.connectAddress(provider);\n            // Reuse a still-valid session for THIS wallet.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === address) {\n                const user = this.evmUser(address);\n                this.authenticatedAddress = address;\n                setCurrentUser(user);\n                this.markAuthMethod();\n                return user;\n            }\n            // SIWE: nonce -> canonical EIP-4361 prompt -> the wallet personal_sign's it.\n            const nonce = await genAuthNonce();\n            const appId = (await getConfig()).appId;\n            const chainId = (_a = this.config.chainId) !== null && _a !== void 0 ? _a : await this.currentChainId(provider);\n            if (chainId === null)\n                throw new Error('Could not verify the EVM wallet chain for SIWE login');\n            const message = genSiweMessage(address, nonce, appId, this.resolveDomain(), this.resolveUri(), { chainId });\n            // personal_sign(message, address) -> 0x r‖s‖v hex (the shape the\n            // bounded-auth verifier's recoverSiweSigner consumes). The raw UTF-8\n            // message is signed under the EIP-191 envelope the verifier hashes.\n            const signature = await provider.request({\n                method: 'personal_sign',\n                params: [message, address],\n            });\n            const result = await createSessionWithSignature(address, message, signature, SIWE_SESSION_METHOD);\n            await SessionManager().storeSession(address, result.accessToken, result.idToken, result.refreshToken);\n            this.markAuthMethod();\n            const user = this.evmUser(address);\n            this.authenticatedAddress = address;\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    resolveDomain() {\n        const actual = window.location.host.toLowerCase();\n        if (this.config.domain && this.config.domain.toLowerCase() !== actual) {\n            throw new Error('SIWE domain override must match the current browser origin');\n        }\n        return actual;\n    }\n    resolveUri() {\n        const actual = window.location.origin.toLowerCase();\n        if (this.config.uri) {\n            let configured;\n            try {\n                configured = new URL(this.config.uri).origin.toLowerCase();\n            }\n            catch (_a) {\n                throw new Error('SIWE URI override must be an absolute URL');\n            }\n            if (configured !== actual)\n                throw new Error('SIWE URI override must match the current browser origin');\n        }\n        return actual;\n    }\n    markAuthMethod() {\n        setStoredAuthMethod(INJECTED_EVM_AUTH_METHOD);\n    }\n    async restoreSession(beforeCommit) {\n        const session = await SessionManager().getSession();\n        beforeCommit === null || beforeCommit === void 0 ? void 0 : beforeCommit();\n        if (!session)\n            return null;\n        // An EVM-wallet session stores the EVM address as its address; @user.address\n        // (the Solana wallet) is null for this login.\n        const address = normalizeEvmAddress(session.address);\n        if (!address) {\n            await SessionManager().clearSession();\n            return null;\n        }\n        this.authenticatedAddress = address;\n        const user = this.evmUser(address);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // EIP-1193 has no standard disconnect; clearing the Bounded session is the\n        // logout. (wallet_revokePermissions is non-standard/opt-in — skip it.)\n        await SessionManager().clearSession();\n        this.authenticatedAddress = null;\n        setCurrentUser(null);\n    }\n    // --- Signing surface -------------------------------------------------------\n    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */\n    async signMessage(message) {\n        const provider = this.resolveProvider();\n        const address = await this.connectAddress(provider);\n        if (!this.authenticatedAddress || address !== this.authenticatedAddress) {\n            throw new Error('The connected EVM wallet account changed after login. Sign in again before signing.');\n        }\n        return provider.request({ method: 'personal_sign', params: [message, address] });\n    }\n    // Solana-typed methods are structurally unsupported on an EVM wallet, and\n    // this provider is login-only, so there is no transaction surface at all.\n    async signTransaction(_transaction) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async signAndSubmitTransaction(_transaction, _feePayer) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async getNativeMethods() {\n        return this.resolveProvider();\n    }\n}\nInjectedEvmWalletProvider.instance = null;\n"],"names":["SessionManager"],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,kBAAkB,GAAG,EAAE;AAC7B,IAAI,wBAAwB,GAAG,KAAK;AACpC,SAAS,sBAAsB,GAAG;AAClC,IAAI,IAAI,wBAAwB,IAAI,OAAO,MAAM,KAAK,WAAW;AACjE,QAAQ;AACR,IAAI,wBAAwB,GAAG,IAAI;AACnC,IAAI,MAAM,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,CAAC,KAAK,KAAK;AACnE,QAAQ,MAAM,MAAM,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;AACjF,QAAQ,IAAI,MAAM;AAClB,YAAY,MAAM,CAAC,QAAQ;AAC3B,YAAY,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU;AACzD,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;AACzM,YAAY,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;AAC3C,QAAQ;AACR,IAAI,CAAC,CAAC;AACN;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,uBAAuB,GAAG;AAC1C,IAAI,IAAI,OAAO,MAAM,KAAK,WAAW;AACrC,QAAQ,OAAO,EAAE;AACjB,IAAI,sBAAsB,EAAE;AAC5B,IAAI,IAAI;AACR,QAAQ,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAClE,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf;AACA,IAAI;AACJ,IAAI,OAAO,kBAAkB,CAAC,KAAK,EAAE;AACrC;AACA;AACA;AACA;AACA;AACO,SAAS,0BAA0B,GAAG;AAC7C,IAAI,IAAI,OAAO,MAAM,KAAK,WAAW;AACrC,QAAQ,OAAO,IAAI;AACnB,IAAI,MAAM,OAAO,GAAG,uBAAuB,EAAE;AAC7C,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;AAC1B,QAAQ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ;AAClC,IAAI,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ;AAC/B,IAAI,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU;AAChD,QAAQ,OAAO,GAAG;AAClB,IAAI,OAAO,IAAI;AACf;;ACzDA;AACA;AACA,MAAM,wBAAwB,GAAG,YAAY;AAC7C;AACA,MAAM,mBAAmB,GAAG,MAAM;AAClC,MAAM,aAAa,GAAG,qGAAqG;AAC3H,IAAI,qEAAqE;AACzE,MAAM,aAAa,GAAG,oFAAoF;AAC1G,IAAI,gFAAgF;AACpF,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE;AACxG,QAAQ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC7E,IAAI;AACJ,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;AACpC;AACO,MAAM,yBAAyB,CAAC;AACvC,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE;AAC7B,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AAC3C,YAAY,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC;AAC1G,QAAQ;AACR,QAAQ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;AAClD;AACA,QAAQ,IAAI,yBAAyB,CAAC,QAAQ,EAAE;AAChD,YAAY,yBAAyB,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU;AAClE,YAAY,yBAAyB,CAAC,QAAQ,CAAC,oBAAoB,GAAG,IAAI;AAC1E,YAAY,OAAO,yBAAyB,CAAC,QAAQ;AACrD,QAAQ;AACR,QAAQ,IAAI,CAAC,MAAM,GAAG,UAAU;AAChC,QAAQ,yBAAyB,CAAC,QAAQ,GAAG,IAAI;AACjD,IAAI;AACJ;AACA;AACA;AACA,IAAI,OAAO,CAAC,OAAO,EAAE;AACrB,QAAQ,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;AAClF,IAAI;AACJ,IAAI,eAAe,GAAG;AACtB,QAAQ,IAAI,EAAE;AACd,QAAQ,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,0BAA0B,EAAE;AAC1J,QAAQ,IAAI,CAAC,QAAQ;AACrB,YAAY,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AAC1C,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAClF,QAAQ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS;AACrE,QAAQ,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC;AAChD,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACnF,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACzE,YAAY,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACxE,gBAAgB,OAAO,IAAI;AAC3B,YAAY,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzC,YAAY,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI;AAC9D,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,IAAI,EAAE;AACd,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AACnD,YAAY,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC/D;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMA,uBAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE;AAC1D,gBAAgB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAClD,gBAAgB,IAAI,CAAC,oBAAoB,GAAG,OAAO;AACnD,gBAAgB,cAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,IAAI,CAAC,cAAc,EAAE;AACrC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE;AAC9C,YAAY,MAAM,KAAK,GAAG,CAAC,MAAM,SAAS,EAAE,EAAE,KAAK;AACnD,YAAY,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3H,YAAY,IAAI,OAAO,KAAK,IAAI;AAChC,gBAAgB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACvF,YAAY,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACvH;AACA;AACA;AACA,YAAY,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACrD,gBAAgB,MAAM,EAAE,eAAe;AACvC,gBAAgB,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;AAC1C,aAAa,CAAC;AACd,YAAY,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC;AAC7G,YAAY,MAAMA,uBAAc,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACjH,YAAY,IAAI,CAAC,cAAc,EAAE;AACjC,YAAY,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC9C,YAAY,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC/C,YAAY,cAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAY,cAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,aAAa,GAAG;AACpB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACzD,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;AAC/E,YAAY,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACzF,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,UAAU,GAAG;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;AAC3D,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;AAC7B,YAAY,IAAI,UAAU;AAC1B,YAAY,IAAI;AAChB,gBAAgB,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;AAC1E,YAAY;AACZ,YAAY,OAAO,EAAE,EAAE;AACvB,gBAAgB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;AAC5E,YAAY;AACZ,YAAY,IAAI,UAAU,KAAK,MAAM;AACrC,gBAAgB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC;AAC1F,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,cAAc,GAAG;AACrB,QAAQ,mBAAmB,CAAC,wBAAwB,CAAC;AACrD,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,YAAY,EAAE;AACvC,QAAQ,MAAM,OAAO,GAAG,MAAMA,uBAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,GAAG,MAAM,GAAG,YAAY,EAAE;AAClF,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB;AACA;AACA,QAAQ,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;AAC5D,QAAQ,IAAI,CAAC,OAAO,EAAE;AACtB,YAAY,MAAMA,uBAAc,EAAE,CAAC,YAAY,EAAE;AACjD,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC3C,QAAQ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQ,MAAMA,uBAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AAC/C,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3D,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,KAAK,IAAI,CAAC,oBAAoB,EAAE;AACjF,YAAY,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,IAAI;AACJ;AACA;AACA,IAAI,MAAM,eAAe,CAAC,YAAY,EAAE;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,YAAY,EAAE,SAAS,EAAE;AAC5D,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,IAAI,CAAC,eAAe,EAAE;AACrC,IAAI;AACJ;AACA,yBAAyB,CAAC,QAAQ,GAAG,IAAI;;;;"}
+{"version":3,"file":"injected-evm-wallet-provider-BQ_kG1vI.mjs","sources":["../.rollup-tmp/auth/providers/injected-evm-wallet-types.js","../.rollup-tmp/auth/providers/injected-evm-wallet-provider.js"],"sourcesContent":["// injected-evm-wallet-types.ts — tiny, dependency-free surface for the EVM\n// WALLET LOGIN path (BYO wallet via SIWE). The EVM twin of\n// injected-wallet-types.ts: kept separate from injected-evm-wallet-provider.ts\n// so the SDK entry can eagerly export the type surface + the provider-discovery\n// helper WITHOUT dragging the provider class into the default bundle. The\n// provider is lazy-loaded by getAuthProvider() when an app opts into\n// authMethod:'evm-wallet'.\n//\n// It rides the standard EIP-1193 injected provider a browser wallet exposes\n// (MetaMask / Rabby / Coinbase Wallet / any window.ethereum), discovered via\n// EIP-6963 (multi-wallet, collision-free) with a window.ethereum fallback. It\n// needs NO viem/ethers and NO React — EIP-1193 request() + hex strings suffice.\n// EIP-6963 is announcement-based: wallets add an `eip6963:requestProvider`\n// listener and synchronously dispatch `eip6963:announceProvider` in response. We\n// keep a persistent collector so announcements (including late ones) are\n// captured, and re-request on demand.\nconst announcedProviders = [];\nlet announceListenerAttached = false;\nfunction attachAnnounceListener() {\n    if (announceListenerAttached || typeof window === 'undefined')\n        return;\n    announceListenerAttached = true;\n    window.addEventListener('eip6963:announceProvider', (event) => {\n        const detail = event === null || event === void 0 ? void 0 : event.detail;\n        if (detail &&\n            detail.provider &&\n            typeof detail.provider.request === 'function' &&\n            !announcedProviders.some((d) => { var _a, _b; return ((_a = d.info) === null || _a === void 0 ? void 0 : _a.uuid) === ((_b = detail.info) === null || _b === void 0 ? void 0 : _b.uuid); })) {\n            announcedProviders.push(detail);\n        }\n    });\n}\n/**\n * Request + collect EIP-6963 providers. Dispatches `eip6963:requestProvider`\n * (synchronous — already-loaded wallets announce in the same tick) and returns\n * every wallet announced so far. Kept synchronous so it works inside a user\n * gesture and can be eagerly exported from the SDK entry.\n */\nexport function requestEip6963Providers() {\n    if (typeof window === 'undefined')\n        return [];\n    attachAnnounceListener();\n    try {\n        window.dispatchEvent(new Event('eip6963:requestProvider'));\n    }\n    catch (_a) {\n        /* older browsers without Event constructor — fall through to window.ethereum */\n    }\n    return announcedProviders.slice();\n}\n/**\n * Default EVM provider discovery: EIP-6963 first (multi-wallet, collision-free),\n * then legacy `window.ethereum`. Returns null when no injected wallet is present.\n */\nexport function defaultInjectedEvmProvider() {\n    if (typeof window === 'undefined')\n        return null;\n    const details = requestEip6963Providers();\n    if (details.length > 0)\n        return details[0].provider;\n    const eth = window.ethereum;\n    if (eth && typeof eth.request === 'function')\n        return eth;\n    return null;\n}\n","import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSiweMessage, getConfig, normalizeEvmAddress, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { setStoredAuthMethod } from '../stored-auth-method';\nimport { defaultInjectedEvmProvider, } from './injected-evm-wallet-types';\n// Re-export the type surface + discovery helper for callers who import the\n// provider module directly.\nexport { defaultInjectedEvmProvider };\n// Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,\n// so clearIncompatibleSession() keeps (not wipes) this session on the next init().\nconst INJECTED_EVM_AUTH_METHOD = 'evm-wallet';\n// The /session issuer's discriminator for the SIWE (EIP-4361 secp256k1) exchange.\nconst SIWE_SESSION_METHOD = 'siwe';\nconst NO_WALLET_ERR = 'No injected EVM wallet found. Install a wallet like MetaMask (metamask.io) or Rabby and try again, ' +\n    'or pass config.evmWalletConfig.getProvider to point at your wallet.';\nconst NO_SOL_TX_ERR = 'EVM wallet login is a LOGIN-ONLY surface (SIWE + personal_sign) and has no Solana ' +\n    'transaction surface: signTransaction/signAndSubmitTransaction are unavailable.';\nfunction normalizeConfig(config) {\n    if (config.chainId !== undefined && (!Number.isSafeInteger(config.chainId) || config.chainId <= 0)) {\n        throw new Error('EVM wallet chainId must be a positive safe integer');\n    }\n    return Object.assign({}, config);\n}\nexport class InjectedEvmWalletProvider {\n    constructor(config = {}) {\n        this.authenticatedAddress = null;\n        if (typeof window === 'undefined') {\n            throw new Error('InjectedEvmWalletProvider can only be instantiated in a browser environment');\n        }\n        const normalized = normalizeConfig(config);\n        // Singleton so the SDK reuses one instance (mirrors the other providers).\n        if (InjectedEvmWalletProvider.instance) {\n            InjectedEvmWalletProvider.instance.config = normalized;\n            InjectedEvmWalletProvider.instance.authenticatedAddress = null;\n            return InjectedEvmWalletProvider.instance;\n        }\n        this.config = normalized;\n        InjectedEvmWalletProvider.instance = this;\n    }\n    // @user.address (the Solana wallet) is null for an EVM-wallet login: the user\n    // authenticated with an EVM wallet and has no Solana address. User.address is\n    // typed `string | null`, so this is a plain null, not a cast.\n    evmUser(address) {\n        return { id: address, address: null, evmAddress: address, provider: this };\n    }\n    resolveProvider() {\n        var _a;\n        const provider = (_a = (this.config.getProvider ? this.config.getProvider() : null)) !== null && _a !== void 0 ? _a : defaultInjectedEvmProvider();\n        if (!provider)\n            throw new Error(NO_WALLET_ERR);\n        return provider;\n    }\n    /** Connect the injected wallet and return its canonical lowercase EVM address. */\n    async connectAddress(provider) {\n        const accounts = await provider.request({ method: 'eth_requestAccounts' });\n        const raw = Array.isArray(accounts) ? accounts[0] : undefined;\n        const address = normalizeEvmAddress(raw);\n        if (!address)\n            throw new Error('Wallet did not return a valid EVM address on connect');\n        return address;\n    }\n    /** Current chain id the wallet is connected to (EIP-155 number), or null. */\n    async currentChainId(provider) {\n        try {\n            const hex = await provider.request({ method: 'eth_chainId' });\n            if (typeof hex !== 'string' || !/^0x[0-9a-fA-F]+$/.test(hex))\n                return null;\n            const n = Number(BigInt(hex));\n            return Number.isSafeInteger(n) && n > 0 ? n : null;\n        }\n        catch (_a) {\n            return null;\n        }\n    }\n    async login() {\n        var _a;\n        setAuthLoading(true);\n        try {\n            const provider = this.resolveProvider();\n            const address = await this.connectAddress(provider);\n            // Reuse a still-valid session for THIS wallet.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === address) {\n                const user = this.evmUser(address);\n                this.authenticatedAddress = address;\n                setCurrentUser(user);\n                this.markAuthMethod();\n                return user;\n            }\n            // SIWE: nonce -> canonical EIP-4361 prompt -> the wallet personal_sign's it.\n            const nonce = await genAuthNonce();\n            const appId = (await getConfig()).appId;\n            const chainId = (_a = this.config.chainId) !== null && _a !== void 0 ? _a : await this.currentChainId(provider);\n            if (chainId === null)\n                throw new Error('Could not verify the EVM wallet chain for SIWE login');\n            const message = genSiweMessage(address, nonce, appId, this.resolveDomain(), this.resolveUri(), { chainId });\n            // personal_sign(message, address) -> 0x r‖s‖v hex (the shape the\n            // bounded-auth verifier's recoverSiweSigner consumes). The raw UTF-8\n            // message is signed under the EIP-191 envelope the verifier hashes.\n            const signature = await provider.request({\n                method: 'personal_sign',\n                params: [message, address],\n            });\n            const result = await createSessionWithSignature(address, message, signature, SIWE_SESSION_METHOD);\n            await SessionManager().storeSession(address, result.accessToken, result.idToken, result.refreshToken);\n            this.markAuthMethod();\n            const user = this.evmUser(address);\n            this.authenticatedAddress = address;\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    resolveDomain() {\n        const actual = window.location.host.toLowerCase();\n        if (this.config.domain && this.config.domain.toLowerCase() !== actual) {\n            throw new Error('SIWE domain override must match the current browser origin');\n        }\n        return actual;\n    }\n    resolveUri() {\n        const actual = window.location.origin.toLowerCase();\n        if (this.config.uri) {\n            let configured;\n            try {\n                configured = new URL(this.config.uri).origin.toLowerCase();\n            }\n            catch (_a) {\n                throw new Error('SIWE URI override must be an absolute URL');\n            }\n            if (configured !== actual)\n                throw new Error('SIWE URI override must match the current browser origin');\n        }\n        return actual;\n    }\n    markAuthMethod() {\n        setStoredAuthMethod(INJECTED_EVM_AUTH_METHOD);\n    }\n    async restoreSession(beforeCommit) {\n        const session = await SessionManager().getSession();\n        beforeCommit === null || beforeCommit === void 0 ? void 0 : beforeCommit();\n        if (!session)\n            return null;\n        // An EVM-wallet session stores the EVM address as its address; @user.address\n        // (the Solana wallet) is null for this login.\n        const address = normalizeEvmAddress(session.address);\n        if (!address) {\n            await SessionManager().clearSession();\n            return null;\n        }\n        this.authenticatedAddress = address;\n        const user = this.evmUser(address);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // EIP-1193 has no standard disconnect; clearing the Bounded session is the\n        // logout. (wallet_revokePermissions is non-standard/opt-in — skip it.)\n        await SessionManager().clearSession();\n        this.authenticatedAddress = null;\n        setCurrentUser(null);\n    }\n    // --- Signing surface -------------------------------------------------------\n    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */\n    async signMessage(message) {\n        const provider = this.resolveProvider();\n        const address = await this.connectAddress(provider);\n        if (!this.authenticatedAddress || address !== this.authenticatedAddress) {\n            throw new Error('The connected EVM wallet account changed after login. Sign in again before signing.');\n        }\n        return provider.request({ method: 'personal_sign', params: [message, address] });\n    }\n    // Solana-typed methods are structurally unsupported on an EVM wallet, and\n    // this provider is login-only, so there is no transaction surface at all.\n    async signTransaction(_transaction) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async signAndSubmitTransaction(_transaction, _feePayer) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async getNativeMethods() {\n        return this.resolveProvider();\n    }\n}\nInjectedEvmWalletProvider.instance = null;\n"],"names":["SessionManager"],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,kBAAkB,GAAG,EAAE;AAC7B,IAAI,wBAAwB,GAAG,KAAK;AACpC,SAAS,sBAAsB,GAAG;AAClC,IAAI,IAAI,wBAAwB,IAAI,OAAO,MAAM,KAAK,WAAW;AACjE,QAAQ;AACR,IAAI,wBAAwB,GAAG,IAAI;AACnC,IAAI,MAAM,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,CAAC,KAAK,KAAK;AACnE,QAAQ,MAAM,MAAM,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;AACjF,QAAQ,IAAI,MAAM;AAClB,YAAY,MAAM,CAAC,QAAQ;AAC3B,YAAY,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU;AACzD,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;AACzM,YAAY,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;AAC3C,QAAQ;AACR,IAAI,CAAC,CAAC;AACN;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,uBAAuB,GAAG;AAC1C,IAAI,IAAI,OAAO,MAAM,KAAK,WAAW;AACrC,QAAQ,OAAO,EAAE;AACjB,IAAI,sBAAsB,EAAE;AAC5B,IAAI,IAAI;AACR,QAAQ,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAClE,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf;AACA,IAAI;AACJ,IAAI,OAAO,kBAAkB,CAAC,KAAK,EAAE;AACrC;AACA;AACA;AACA;AACA;AACO,SAAS,0BAA0B,GAAG;AAC7C,IAAI,IAAI,OAAO,MAAM,KAAK,WAAW;AACrC,QAAQ,OAAO,IAAI;AACnB,IAAI,MAAM,OAAO,GAAG,uBAAuB,EAAE;AAC7C,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;AAC1B,QAAQ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ;AAClC,IAAI,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ;AAC/B,IAAI,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU;AAChD,QAAQ,OAAO,GAAG;AAClB,IAAI,OAAO,IAAI;AACf;;ACzDA;AACA;AACA,MAAM,wBAAwB,GAAG,YAAY;AAC7C;AACA,MAAM,mBAAmB,GAAG,MAAM;AAClC,MAAM,aAAa,GAAG,qGAAqG;AAC3H,IAAI,qEAAqE;AACzE,MAAM,aAAa,GAAG,oFAAoF;AAC1G,IAAI,gFAAgF;AACpF,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE;AACxG,QAAQ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC7E,IAAI;AACJ,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;AACpC;AACO,MAAM,yBAAyB,CAAC;AACvC,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE;AAC7B,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AAC3C,YAAY,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC;AAC1G,QAAQ;AACR,QAAQ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;AAClD;AACA,QAAQ,IAAI,yBAAyB,CAAC,QAAQ,EAAE;AAChD,YAAY,yBAAyB,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU;AAClE,YAAY,yBAAyB,CAAC,QAAQ,CAAC,oBAAoB,GAAG,IAAI;AAC1E,YAAY,OAAO,yBAAyB,CAAC,QAAQ;AACrD,QAAQ;AACR,QAAQ,IAAI,CAAC,MAAM,GAAG,UAAU;AAChC,QAAQ,yBAAyB,CAAC,QAAQ,GAAG,IAAI;AACjD,IAAI;AACJ;AACA;AACA;AACA,IAAI,OAAO,CAAC,OAAO,EAAE;AACrB,QAAQ,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;AAClF,IAAI;AACJ,IAAI,eAAe,GAAG;AACtB,QAAQ,IAAI,EAAE;AACd,QAAQ,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,0BAA0B,EAAE;AAC1J,QAAQ,IAAI,CAAC,QAAQ;AACrB,YAAY,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AAC1C,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAClF,QAAQ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS;AACrE,QAAQ,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC;AAChD,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACnF,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACzE,YAAY,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACxE,gBAAgB,OAAO,IAAI;AAC3B,YAAY,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzC,YAAY,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI;AAC9D,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,IAAI,EAAE;AACd,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AACnD,YAAY,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC/D;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMA,uBAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE;AAC1D,gBAAgB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAClD,gBAAgB,IAAI,CAAC,oBAAoB,GAAG,OAAO;AACnD,gBAAgB,cAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,IAAI,CAAC,cAAc,EAAE;AACrC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE;AAC9C,YAAY,MAAM,KAAK,GAAG,CAAC,MAAM,SAAS,EAAE,EAAE,KAAK;AACnD,YAAY,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3H,YAAY,IAAI,OAAO,KAAK,IAAI;AAChC,gBAAgB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACvF,YAAY,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACvH;AACA;AACA;AACA,YAAY,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACrD,gBAAgB,MAAM,EAAE,eAAe;AACvC,gBAAgB,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;AAC1C,aAAa,CAAC;AACd,YAAY,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC;AAC7G,YAAY,MAAMA,uBAAc,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACjH,YAAY,IAAI,CAAC,cAAc,EAAE;AACjC,YAAY,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC9C,YAAY,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC/C,YAAY,cAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAY,cAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,aAAa,GAAG;AACpB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACzD,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;AAC/E,YAAY,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACzF,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,UAAU,GAAG;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;AAC3D,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;AAC7B,YAAY,IAAI,UAAU;AAC1B,YAAY,IAAI;AAChB,gBAAgB,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;AAC1E,YAAY;AACZ,YAAY,OAAO,EAAE,EAAE;AACvB,gBAAgB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;AAC5E,YAAY;AACZ,YAAY,IAAI,UAAU,KAAK,MAAM;AACrC,gBAAgB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC;AAC1F,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,cAAc,GAAG;AACrB,QAAQ,mBAAmB,CAAC,wBAAwB,CAAC;AACrD,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,YAAY,EAAE;AACvC,QAAQ,MAAM,OAAO,GAAG,MAAMA,uBAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,GAAG,MAAM,GAAG,YAAY,EAAE;AAClF,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB;AACA;AACA,QAAQ,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;AAC5D,QAAQ,IAAI,CAAC,OAAO,EAAE;AACtB,YAAY,MAAMA,uBAAc,EAAE,CAAC,YAAY,EAAE;AACjD,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC3C,QAAQ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQ,MAAMA,uBAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AAC/C,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3D,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,KAAK,IAAI,CAAC,oBAAoB,EAAE;AACjF,YAAY,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,IAAI;AACJ;AACA;AACA,IAAI,MAAM,eAAe,CAAC,YAAY,EAAE;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,YAAY,EAAE,SAAS,EAAE;AAC5D,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,IAAI,CAAC,eAAe,EAAE;AACrC,IAAI;AACJ;AACA,yBAAyB,CAAC,QAAQ,GAAG,IAAI;;;;"}

package/dist/{injected-evm-wallet-provider-BtyG1HOX.mjs → injected-evm-wallet-provider-C4aKa2v1.mjs}

@@ -1,5 +1,5 @@
 import { normalizeEvmAddress, getActiveSessionManager, genAuthNonce, getConfig, genSiweMessage, createSessionWithSignature } from '@bounded-sh/core';
-import { o as defaultInjectedEvmProvider, j as setAuthLoading, s as setCurrentUser, l as setStoredAuthMethod } from './index-D3kdhCpH.mjs';
+import { o as defaultInjectedEvmProvider, j as setAuthLoading, s as setCurrentUser, l as setStoredAuthMethod } from './index-BAiLpNEQ.mjs';
 import 'react';
 
 // Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,
@@ -183,4 +183,4 @@ class InjectedEvmWalletProvider {
 InjectedEvmWalletProvider.instance = null;
 
 export { InjectedEvmWalletProvider, defaultInjectedEvmProvider };
-//# sourceMappingURL=injected-evm-wallet-provider-BtyG1HOX.mjs.map
+//# sourceMappingURL=injected-evm-wallet-provider-C4aKa2v1.mjs.map

package/dist/{injected-evm-wallet-provider-BtyG1HOX.mjs.map → injected-evm-wallet-provider-C4aKa2v1.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"injected-evm-wallet-provider-BtyG1HOX.mjs","sources":["../.rollup-tmp/auth/providers/injected-evm-wallet-provider.js"],"sourcesContent":["import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSiweMessage, getConfig, normalizeEvmAddress, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { setStoredAuthMethod } from '../stored-auth-method';\nimport { defaultInjectedEvmProvider, } from './injected-evm-wallet-types';\n// Re-export the type surface + discovery helper for callers who import the\n// provider module directly.\nexport { defaultInjectedEvmProvider };\n// Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,\n// so clearIncompatibleSession() keeps (not wipes) this session on the next init().\nconst INJECTED_EVM_AUTH_METHOD = 'evm-wallet';\n// The /session issuer's discriminator for the SIWE (EIP-4361 secp256k1) exchange.\nconst SIWE_SESSION_METHOD = 'siwe';\nconst NO_WALLET_ERR = 'No injected EVM wallet found. Install a wallet like MetaMask (metamask.io) or Rabby and try again, ' +\n    'or pass config.evmWalletConfig.getProvider to point at your wallet.';\nconst NO_SOL_TX_ERR = 'EVM wallet login is a LOGIN-ONLY surface (SIWE + personal_sign) and has no Solana ' +\n    'transaction surface: signTransaction/signAndSubmitTransaction are unavailable.';\nfunction normalizeConfig(config) {\n    if (config.chainId !== undefined && (!Number.isSafeInteger(config.chainId) || config.chainId <= 0)) {\n        throw new Error('EVM wallet chainId must be a positive safe integer');\n    }\n    return Object.assign({}, config);\n}\nexport class InjectedEvmWalletProvider {\n    constructor(config = {}) {\n        this.authenticatedAddress = null;\n        if (typeof window === 'undefined') {\n            throw new Error('InjectedEvmWalletProvider can only be instantiated in a browser environment');\n        }\n        const normalized = normalizeConfig(config);\n        // Singleton so the SDK reuses one instance (mirrors the other providers).\n        if (InjectedEvmWalletProvider.instance) {\n            InjectedEvmWalletProvider.instance.config = normalized;\n            InjectedEvmWalletProvider.instance.authenticatedAddress = null;\n            return InjectedEvmWalletProvider.instance;\n        }\n        this.config = normalized;\n        InjectedEvmWalletProvider.instance = this;\n    }\n    // @user.address (the Solana wallet) is null for an EVM-wallet login: the user\n    // authenticated with an EVM wallet and has no Solana address. User.address is\n    // typed `string | null`, so this is a plain null, not a cast.\n    evmUser(address) {\n        return { id: address, address: null, evmAddress: address, provider: this };\n    }\n    resolveProvider() {\n        var _a;\n        const provider = (_a = (this.config.getProvider ? this.config.getProvider() : null)) !== null && _a !== void 0 ? _a : defaultInjectedEvmProvider();\n        if (!provider)\n            throw new Error(NO_WALLET_ERR);\n        return provider;\n    }\n    /** Connect the injected wallet and return its canonical lowercase EVM address. */\n    async connectAddress(provider) {\n        const accounts = await provider.request({ method: 'eth_requestAccounts' });\n        const raw = Array.isArray(accounts) ? accounts[0] : undefined;\n        const address = normalizeEvmAddress(raw);\n        if (!address)\n            throw new Error('Wallet did not return a valid EVM address on connect');\n        return address;\n    }\n    /** Current chain id the wallet is connected to (EIP-155 number), or null. */\n    async currentChainId(provider) {\n        try {\n            const hex = await provider.request({ method: 'eth_chainId' });\n            if (typeof hex !== 'string' || !/^0x[0-9a-fA-F]+$/.test(hex))\n                return null;\n            const n = Number(BigInt(hex));\n            return Number.isSafeInteger(n) && n > 0 ? n : null;\n        }\n        catch (_a) {\n            return null;\n        }\n    }\n    async login() {\n        var _a;\n        setAuthLoading(true);\n        try {\n            const provider = this.resolveProvider();\n            const address = await this.connectAddress(provider);\n            // Reuse a still-valid session for THIS wallet.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === address) {\n                const user = this.evmUser(address);\n                this.authenticatedAddress = address;\n                setCurrentUser(user);\n                this.markAuthMethod();\n                return user;\n            }\n            // SIWE: nonce -> canonical EIP-4361 prompt -> the wallet personal_sign's it.\n            const nonce = await genAuthNonce();\n            const appId = (await getConfig()).appId;\n            const chainId = (_a = this.config.chainId) !== null && _a !== void 0 ? _a : await this.currentChainId(provider);\n            if (chainId === null)\n                throw new Error('Could not verify the EVM wallet chain for SIWE login');\n            const message = genSiweMessage(address, nonce, appId, this.resolveDomain(), this.resolveUri(), { chainId });\n            // personal_sign(message, address) -> 0x r‖s‖v hex (the shape the\n            // bounded-auth verifier's recoverSiweSigner consumes). The raw UTF-8\n            // message is signed under the EIP-191 envelope the verifier hashes.\n            const signature = await provider.request({\n                method: 'personal_sign',\n                params: [message, address],\n            });\n            const result = await createSessionWithSignature(address, message, signature, SIWE_SESSION_METHOD);\n            await SessionManager().storeSession(address, result.accessToken, result.idToken, result.refreshToken);\n            this.markAuthMethod();\n            const user = this.evmUser(address);\n            this.authenticatedAddress = address;\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    resolveDomain() {\n        const actual = window.location.host.toLowerCase();\n        if (this.config.domain && this.config.domain.toLowerCase() !== actual) {\n            throw new Error('SIWE domain override must match the current browser origin');\n        }\n        return actual;\n    }\n    resolveUri() {\n        const actual = window.location.origin.toLowerCase();\n        if (this.config.uri) {\n            let configured;\n            try {\n                configured = new URL(this.config.uri).origin.toLowerCase();\n            }\n            catch (_a) {\n                throw new Error('SIWE URI override must be an absolute URL');\n            }\n            if (configured !== actual)\n                throw new Error('SIWE URI override must match the current browser origin');\n        }\n        return actual;\n    }\n    markAuthMethod() {\n        setStoredAuthMethod(INJECTED_EVM_AUTH_METHOD);\n    }\n    async restoreSession(beforeCommit) {\n        const session = await SessionManager().getSession();\n        beforeCommit === null || beforeCommit === void 0 ? void 0 : beforeCommit();\n        if (!session)\n            return null;\n        // An EVM-wallet session stores the EVM address as its address; @user.address\n        // (the Solana wallet) is null for this login.\n        const address = normalizeEvmAddress(session.address);\n        if (!address) {\n            await SessionManager().clearSession();\n            return null;\n        }\n        this.authenticatedAddress = address;\n        const user = this.evmUser(address);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // EIP-1193 has no standard disconnect; clearing the Bounded session is the\n        // logout. (wallet_revokePermissions is non-standard/opt-in — skip it.)\n        await SessionManager().clearSession();\n        this.authenticatedAddress = null;\n        setCurrentUser(null);\n    }\n    // --- Signing surface -------------------------------------------------------\n    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */\n    async signMessage(message) {\n        const provider = this.resolveProvider();\n        const address = await this.connectAddress(provider);\n        if (!this.authenticatedAddress || address !== this.authenticatedAddress) {\n            throw new Error('The connected EVM wallet account changed after login. Sign in again before signing.');\n        }\n        return provider.request({ method: 'personal_sign', params: [message, address] });\n    }\n    // Solana-typed methods are structurally unsupported on an EVM wallet, and\n    // this provider is login-only, so there is no transaction surface at all.\n    async signTransaction(_transaction) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async signAndSubmitTransaction(_transaction, _feePayer) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async getNativeMethods() {\n        return this.resolveProvider();\n    }\n}\nInjectedEvmWalletProvider.instance = null;\n"],"names":["SessionManager"],"mappings":";;;;AAOA;AACA;AACA,MAAM,wBAAwB,GAAG,YAAY;AAC7C;AACA,MAAM,mBAAmB,GAAG,MAAM;AAClC,MAAM,aAAa,GAAG,qGAAqG;AAC3H,IAAI,qEAAqE;AACzE,MAAM,aAAa,GAAG,oFAAoF;AAC1G,IAAI,gFAAgF;AACpF,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE;AACxG,QAAQ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC7E,IAAI;AACJ,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;AACpC;AACO,MAAM,yBAAyB,CAAC;AACvC,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE;AAC7B,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AAC3C,YAAY,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC;AAC1G,QAAQ;AACR,QAAQ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;AAClD;AACA,QAAQ,IAAI,yBAAyB,CAAC,QAAQ,EAAE;AAChD,YAAY,yBAAyB,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU;AAClE,YAAY,yBAAyB,CAAC,QAAQ,CAAC,oBAAoB,GAAG,IAAI;AAC1E,YAAY,OAAO,yBAAyB,CAAC,QAAQ;AACrD,QAAQ;AACR,QAAQ,IAAI,CAAC,MAAM,GAAG,UAAU;AAChC,QAAQ,yBAAyB,CAAC,QAAQ,GAAG,IAAI;AACjD,IAAI;AACJ;AACA;AACA;AACA,IAAI,OAAO,CAAC,OAAO,EAAE;AACrB,QAAQ,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;AAClF,IAAI;AACJ,IAAI,eAAe,GAAG;AACtB,QAAQ,IAAI,EAAE;AACd,QAAQ,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,0BAA0B,EAAE;AAC1J,QAAQ,IAAI,CAAC,QAAQ;AACrB,YAAY,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AAC1C,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAClF,QAAQ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS;AACrE,QAAQ,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC;AAChD,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACnF,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACzE,YAAY,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACxE,gBAAgB,OAAO,IAAI;AAC3B,YAAY,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzC,YAAY,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI;AAC9D,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,IAAI,EAAE;AACd,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AACnD,YAAY,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC/D;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMA,uBAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE;AAC1D,gBAAgB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAClD,gBAAgB,IAAI,CAAC,oBAAoB,GAAG,OAAO;AACnD,gBAAgB,cAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,IAAI,CAAC,cAAc,EAAE;AACrC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE;AAC9C,YAAY,MAAM,KAAK,GAAG,CAAC,MAAM,SAAS,EAAE,EAAE,KAAK;AACnD,YAAY,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3H,YAAY,IAAI,OAAO,KAAK,IAAI;AAChC,gBAAgB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACvF,YAAY,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACvH;AACA;AACA;AACA,YAAY,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACrD,gBAAgB,MAAM,EAAE,eAAe;AACvC,gBAAgB,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;AAC1C,aAAa,CAAC;AACd,YAAY,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC;AAC7G,YAAY,MAAMA,uBAAc,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACjH,YAAY,IAAI,CAAC,cAAc,EAAE;AACjC,YAAY,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC9C,YAAY,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC/C,YAAY,cAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAY,cAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,aAAa,GAAG;AACpB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACzD,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;AAC/E,YAAY,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACzF,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,UAAU,GAAG;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;AAC3D,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;AAC7B,YAAY,IAAI,UAAU;AAC1B,YAAY,IAAI;AAChB,gBAAgB,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;AAC1E,YAAY;AACZ,YAAY,OAAO,EAAE,EAAE;AACvB,gBAAgB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;AAC5E,YAAY;AACZ,YAAY,IAAI,UAAU,KAAK,MAAM;AACrC,gBAAgB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC;AAC1F,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,cAAc,GAAG;AACrB,QAAQ,mBAAmB,CAAC,wBAAwB,CAAC;AACrD,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,YAAY,EAAE;AACvC,QAAQ,MAAM,OAAO,GAAG,MAAMA,uBAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,GAAG,MAAM,GAAG,YAAY,EAAE;AAClF,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB;AACA;AACA,QAAQ,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;AAC5D,QAAQ,IAAI,CAAC,OAAO,EAAE;AACtB,YAAY,MAAMA,uBAAc,EAAE,CAAC,YAAY,EAAE;AACjD,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC3C,QAAQ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQ,MAAMA,uBAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AAC/C,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3D,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,KAAK,IAAI,CAAC,oBAAoB,EAAE;AACjF,YAAY,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,IAAI;AACJ;AACA;AACA,IAAI,MAAM,eAAe,CAAC,YAAY,EAAE;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,YAAY,EAAE,SAAS,EAAE;AAC5D,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,IAAI,CAAC,eAAe,EAAE;AACrC,IAAI;AACJ;AACA,yBAAyB,CAAC,QAAQ,GAAG,IAAI;;;;"}
+{"version":3,"file":"injected-evm-wallet-provider-C4aKa2v1.mjs","sources":["../.rollup-tmp/auth/providers/injected-evm-wallet-provider.js"],"sourcesContent":["import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSiweMessage, getConfig, normalizeEvmAddress, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { setStoredAuthMethod } from '../stored-auth-method';\nimport { defaultInjectedEvmProvider, } from './injected-evm-wallet-types';\n// Re-export the type surface + discovery helper for callers who import the\n// provider module directly.\nexport { defaultInjectedEvmProvider };\n// Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,\n// so clearIncompatibleSession() keeps (not wipes) this session on the next init().\nconst INJECTED_EVM_AUTH_METHOD = 'evm-wallet';\n// The /session issuer's discriminator for the SIWE (EIP-4361 secp256k1) exchange.\nconst SIWE_SESSION_METHOD = 'siwe';\nconst NO_WALLET_ERR = 'No injected EVM wallet found. Install a wallet like MetaMask (metamask.io) or Rabby and try again, ' +\n    'or pass config.evmWalletConfig.getProvider to point at your wallet.';\nconst NO_SOL_TX_ERR = 'EVM wallet login is a LOGIN-ONLY surface (SIWE + personal_sign) and has no Solana ' +\n    'transaction surface: signTransaction/signAndSubmitTransaction are unavailable.';\nfunction normalizeConfig(config) {\n    if (config.chainId !== undefined && (!Number.isSafeInteger(config.chainId) || config.chainId <= 0)) {\n        throw new Error('EVM wallet chainId must be a positive safe integer');\n    }\n    return Object.assign({}, config);\n}\nexport class InjectedEvmWalletProvider {\n    constructor(config = {}) {\n        this.authenticatedAddress = null;\n        if (typeof window === 'undefined') {\n            throw new Error('InjectedEvmWalletProvider can only be instantiated in a browser environment');\n        }\n        const normalized = normalizeConfig(config);\n        // Singleton so the SDK reuses one instance (mirrors the other providers).\n        if (InjectedEvmWalletProvider.instance) {\n            InjectedEvmWalletProvider.instance.config = normalized;\n            InjectedEvmWalletProvider.instance.authenticatedAddress = null;\n            return InjectedEvmWalletProvider.instance;\n        }\n        this.config = normalized;\n        InjectedEvmWalletProvider.instance = this;\n    }\n    // @user.address (the Solana wallet) is null for an EVM-wallet login: the user\n    // authenticated with an EVM wallet and has no Solana address. User.address is\n    // typed `string | null`, so this is a plain null, not a cast.\n    evmUser(address) {\n        return { id: address, address: null, evmAddress: address, provider: this };\n    }\n    resolveProvider() {\n        var _a;\n        const provider = (_a = (this.config.getProvider ? this.config.getProvider() : null)) !== null && _a !== void 0 ? _a : defaultInjectedEvmProvider();\n        if (!provider)\n            throw new Error(NO_WALLET_ERR);\n        return provider;\n    }\n    /** Connect the injected wallet and return its canonical lowercase EVM address. */\n    async connectAddress(provider) {\n        const accounts = await provider.request({ method: 'eth_requestAccounts' });\n        const raw = Array.isArray(accounts) ? accounts[0] : undefined;\n        const address = normalizeEvmAddress(raw);\n        if (!address)\n            throw new Error('Wallet did not return a valid EVM address on connect');\n        return address;\n    }\n    /** Current chain id the wallet is connected to (EIP-155 number), or null. */\n    async currentChainId(provider) {\n        try {\n            const hex = await provider.request({ method: 'eth_chainId' });\n            if (typeof hex !== 'string' || !/^0x[0-9a-fA-F]+$/.test(hex))\n                return null;\n            const n = Number(BigInt(hex));\n            return Number.isSafeInteger(n) && n > 0 ? n : null;\n        }\n        catch (_a) {\n            return null;\n        }\n    }\n    async login() {\n        var _a;\n        setAuthLoading(true);\n        try {\n            const provider = this.resolveProvider();\n            const address = await this.connectAddress(provider);\n            // Reuse a still-valid session for THIS wallet.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === address) {\n                const user = this.evmUser(address);\n                this.authenticatedAddress = address;\n                setCurrentUser(user);\n                this.markAuthMethod();\n                return user;\n            }\n            // SIWE: nonce -> canonical EIP-4361 prompt -> the wallet personal_sign's it.\n            const nonce = await genAuthNonce();\n            const appId = (await getConfig()).appId;\n            const chainId = (_a = this.config.chainId) !== null && _a !== void 0 ? _a : await this.currentChainId(provider);\n            if (chainId === null)\n                throw new Error('Could not verify the EVM wallet chain for SIWE login');\n            const message = genSiweMessage(address, nonce, appId, this.resolveDomain(), this.resolveUri(), { chainId });\n            // personal_sign(message, address) -> 0x r‖s‖v hex (the shape the\n            // bounded-auth verifier's recoverSiweSigner consumes). The raw UTF-8\n            // message is signed under the EIP-191 envelope the verifier hashes.\n            const signature = await provider.request({\n                method: 'personal_sign',\n                params: [message, address],\n            });\n            const result = await createSessionWithSignature(address, message, signature, SIWE_SESSION_METHOD);\n            await SessionManager().storeSession(address, result.accessToken, result.idToken, result.refreshToken);\n            this.markAuthMethod();\n            const user = this.evmUser(address);\n            this.authenticatedAddress = address;\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    resolveDomain() {\n        const actual = window.location.host.toLowerCase();\n        if (this.config.domain && this.config.domain.toLowerCase() !== actual) {\n            throw new Error('SIWE domain override must match the current browser origin');\n        }\n        return actual;\n    }\n    resolveUri() {\n        const actual = window.location.origin.toLowerCase();\n        if (this.config.uri) {\n            let configured;\n            try {\n                configured = new URL(this.config.uri).origin.toLowerCase();\n            }\n            catch (_a) {\n                throw new Error('SIWE URI override must be an absolute URL');\n            }\n            if (configured !== actual)\n                throw new Error('SIWE URI override must match the current browser origin');\n        }\n        return actual;\n    }\n    markAuthMethod() {\n        setStoredAuthMethod(INJECTED_EVM_AUTH_METHOD);\n    }\n    async restoreSession(beforeCommit) {\n        const session = await SessionManager().getSession();\n        beforeCommit === null || beforeCommit === void 0 ? void 0 : beforeCommit();\n        if (!session)\n            return null;\n        // An EVM-wallet session stores the EVM address as its address; @user.address\n        // (the Solana wallet) is null for this login.\n        const address = normalizeEvmAddress(session.address);\n        if (!address) {\n            await SessionManager().clearSession();\n            return null;\n        }\n        this.authenticatedAddress = address;\n        const user = this.evmUser(address);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // EIP-1193 has no standard disconnect; clearing the Bounded session is the\n        // logout. (wallet_revokePermissions is non-standard/opt-in — skip it.)\n        await SessionManager().clearSession();\n        this.authenticatedAddress = null;\n        setCurrentUser(null);\n    }\n    // --- Signing surface -------------------------------------------------------\n    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */\n    async signMessage(message) {\n        const provider = this.resolveProvider();\n        const address = await this.connectAddress(provider);\n        if (!this.authenticatedAddress || address !== this.authenticatedAddress) {\n            throw new Error('The connected EVM wallet account changed after login. Sign in again before signing.');\n        }\n        return provider.request({ method: 'personal_sign', params: [message, address] });\n    }\n    // Solana-typed methods are structurally unsupported on an EVM wallet, and\n    // this provider is login-only, so there is no transaction surface at all.\n    async signTransaction(_transaction) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async signAndSubmitTransaction(_transaction, _feePayer) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async getNativeMethods() {\n        return this.resolveProvider();\n    }\n}\nInjectedEvmWalletProvider.instance = null;\n"],"names":["SessionManager"],"mappings":";;;;AAOA;AACA;AACA,MAAM,wBAAwB,GAAG,YAAY;AAC7C;AACA,MAAM,mBAAmB,GAAG,MAAM;AAClC,MAAM,aAAa,GAAG,qGAAqG;AAC3H,IAAI,qEAAqE;AACzE,MAAM,aAAa,GAAG,oFAAoF;AAC1G,IAAI,gFAAgF;AACpF,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE;AACxG,QAAQ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC7E,IAAI;AACJ,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;AACpC;AACO,MAAM,yBAAyB,CAAC;AACvC,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE;AAC7B,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AAC3C,YAAY,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC;AAC1G,QAAQ;AACR,QAAQ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;AAClD;AACA,QAAQ,IAAI,yBAAyB,CAAC,QAAQ,EAAE;AAChD,YAAY,yBAAyB,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU;AAClE,YAAY,yBAAyB,CAAC,QAAQ,CAAC,oBAAoB,GAAG,IAAI;AAC1E,YAAY,OAAO,yBAAyB,CAAC,QAAQ;AACrD,QAAQ;AACR,QAAQ,IAAI,CAAC,MAAM,GAAG,UAAU;AAChC,QAAQ,yBAAyB,CAAC,QAAQ,GAAG,IAAI;AACjD,IAAI;AACJ;AACA;AACA;AACA,IAAI,OAAO,CAAC,OAAO,EAAE;AACrB,QAAQ,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;AAClF,IAAI;AACJ,IAAI,eAAe,GAAG;AACtB,QAAQ,IAAI,EAAE;AACd,QAAQ,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,0BAA0B,EAAE;AAC1J,QAAQ,IAAI,CAAC,QAAQ;AACrB,YAAY,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AAC1C,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAClF,QAAQ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS;AACrE,QAAQ,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC;AAChD,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACnF,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACzE,YAAY,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACxE,gBAAgB,OAAO,IAAI;AAC3B,YAAY,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzC,YAAY,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI;AAC9D,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,IAAI,EAAE;AACd,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AACnD,YAAY,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC/D;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMA,uBAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE;AAC1D,gBAAgB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAClD,gBAAgB,IAAI,CAAC,oBAAoB,GAAG,OAAO;AACnD,gBAAgB,cAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,IAAI,CAAC,cAAc,EAAE;AACrC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE;AAC9C,YAAY,MAAM,KAAK,GAAG,CAAC,MAAM,SAAS,EAAE,EAAE,KAAK;AACnD,YAAY,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3H,YAAY,IAAI,OAAO,KAAK,IAAI;AAChC,gBAAgB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACvF,YAAY,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACvH;AACA;AACA;AACA,YAAY,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACrD,gBAAgB,MAAM,EAAE,eAAe;AACvC,gBAAgB,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;AAC1C,aAAa,CAAC;AACd,YAAY,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC;AAC7G,YAAY,MAAMA,uBAAc,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACjH,YAAY,IAAI,CAAC,cAAc,EAAE;AACjC,YAAY,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC9C,YAAY,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC/C,YAAY,cAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAY,cAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,aAAa,GAAG;AACpB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACzD,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;AAC/E,YAAY,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACzF,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,UAAU,GAAG;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;AAC3D,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;AAC7B,YAAY,IAAI,UAAU;AAC1B,YAAY,IAAI;AAChB,gBAAgB,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;AAC1E,YAAY;AACZ,YAAY,OAAO,EAAE,EAAE;AACvB,gBAAgB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;AAC5E,YAAY;AACZ,YAAY,IAAI,UAAU,KAAK,MAAM;AACrC,gBAAgB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC;AAC1F,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,cAAc,GAAG;AACrB,QAAQ,mBAAmB,CAAC,wBAAwB,CAAC;AACrD,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,YAAY,EAAE;AACvC,QAAQ,MAAM,OAAO,GAAG,MAAMA,uBAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,GAAG,MAAM,GAAG,YAAY,EAAE;AAClF,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB;AACA;AACA,QAAQ,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;AAC5D,QAAQ,IAAI,CAAC,OAAO,EAAE;AACtB,YAAY,MAAMA,uBAAc,EAAE,CAAC,YAAY,EAAE;AACjD,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC3C,QAAQ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQ,MAAMA,uBAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AAC/C,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3D,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,KAAK,IAAI,CAAC,oBAAoB,EAAE;AACjF,YAAY,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,IAAI;AACJ;AACA;AACA,IAAI,MAAM,eAAe,CAAC,YAAY,EAAE;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,YAAY,EAAE,SAAS,EAAE;AAC5D,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,IAAI,CAAC,eAAe,EAAE;AACrC,IAAI;AACJ;AACA,yBAAyB,CAAC,QAAQ,GAAG,IAAI;;;;"}

package/dist/{injected-evm-wallet-provider-IlkuKffc.js → injected-evm-wallet-provider-D06arDQD.js}

@@ -1,7 +1,7 @@
 'use strict';
 
 var core = require('@bounded-sh/core');
-var index = require('./index-DJeEMevo.js');
+var index = require('./index-BZ0X1Z9X.js');
 require('react');
 
 // Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,
@@ -186,4 +186,4 @@ InjectedEvmWalletProvider.instance = null;
 
 exports.defaultInjectedEvmProvider = index.defaultInjectedEvmProvider;
 exports.InjectedEvmWalletProvider = InjectedEvmWalletProvider;
-//# sourceMappingURL=injected-evm-wallet-provider-IlkuKffc.js.map
+//# sourceMappingURL=injected-evm-wallet-provider-D06arDQD.js.map

package/dist/{injected-evm-wallet-provider-IlkuKffc.js.map → injected-evm-wallet-provider-D06arDQD.js.map}

@@ -1 +1 @@
-{"version":3,"file":"injected-evm-wallet-provider-IlkuKffc.js","sources":["../.rollup-tmp/auth/providers/injected-evm-wallet-provider.js"],"sourcesContent":["import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSiweMessage, getConfig, normalizeEvmAddress, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { setStoredAuthMethod } from '../stored-auth-method';\nimport { defaultInjectedEvmProvider, } from './injected-evm-wallet-types';\n// Re-export the type surface + discovery helper for callers who import the\n// provider module directly.\nexport { defaultInjectedEvmProvider };\n// Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,\n// so clearIncompatibleSession() keeps (not wipes) this session on the next init().\nconst INJECTED_EVM_AUTH_METHOD = 'evm-wallet';\n// The /session issuer's discriminator for the SIWE (EIP-4361 secp256k1) exchange.\nconst SIWE_SESSION_METHOD = 'siwe';\nconst NO_WALLET_ERR = 'No injected EVM wallet found. Install a wallet like MetaMask (metamask.io) or Rabby and try again, ' +\n    'or pass config.evmWalletConfig.getProvider to point at your wallet.';\nconst NO_SOL_TX_ERR = 'EVM wallet login is a LOGIN-ONLY surface (SIWE + personal_sign) and has no Solana ' +\n    'transaction surface: signTransaction/signAndSubmitTransaction are unavailable.';\nfunction normalizeConfig(config) {\n    if (config.chainId !== undefined && (!Number.isSafeInteger(config.chainId) || config.chainId <= 0)) {\n        throw new Error('EVM wallet chainId must be a positive safe integer');\n    }\n    return Object.assign({}, config);\n}\nexport class InjectedEvmWalletProvider {\n    constructor(config = {}) {\n        this.authenticatedAddress = null;\n        if (typeof window === 'undefined') {\n            throw new Error('InjectedEvmWalletProvider can only be instantiated in a browser environment');\n        }\n        const normalized = normalizeConfig(config);\n        // Singleton so the SDK reuses one instance (mirrors the other providers).\n        if (InjectedEvmWalletProvider.instance) {\n            InjectedEvmWalletProvider.instance.config = normalized;\n            InjectedEvmWalletProvider.instance.authenticatedAddress = null;\n            return InjectedEvmWalletProvider.instance;\n        }\n        this.config = normalized;\n        InjectedEvmWalletProvider.instance = this;\n    }\n    // @user.address (the Solana wallet) is null for an EVM-wallet login: the user\n    // authenticated with an EVM wallet and has no Solana address. User.address is\n    // typed `string | null`, so this is a plain null, not a cast.\n    evmUser(address) {\n        return { id: address, address: null, evmAddress: address, provider: this };\n    }\n    resolveProvider() {\n        var _a;\n        const provider = (_a = (this.config.getProvider ? this.config.getProvider() : null)) !== null && _a !== void 0 ? _a : defaultInjectedEvmProvider();\n        if (!provider)\n            throw new Error(NO_WALLET_ERR);\n        return provider;\n    }\n    /** Connect the injected wallet and return its canonical lowercase EVM address. */\n    async connectAddress(provider) {\n        const accounts = await provider.request({ method: 'eth_requestAccounts' });\n        const raw = Array.isArray(accounts) ? accounts[0] : undefined;\n        const address = normalizeEvmAddress(raw);\n        if (!address)\n            throw new Error('Wallet did not return a valid EVM address on connect');\n        return address;\n    }\n    /** Current chain id the wallet is connected to (EIP-155 number), or null. */\n    async currentChainId(provider) {\n        try {\n            const hex = await provider.request({ method: 'eth_chainId' });\n            if (typeof hex !== 'string' || !/^0x[0-9a-fA-F]+$/.test(hex))\n                return null;\n            const n = Number(BigInt(hex));\n            return Number.isSafeInteger(n) && n > 0 ? n : null;\n        }\n        catch (_a) {\n            return null;\n        }\n    }\n    async login() {\n        var _a;\n        setAuthLoading(true);\n        try {\n            const provider = this.resolveProvider();\n            const address = await this.connectAddress(provider);\n            // Reuse a still-valid session for THIS wallet.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === address) {\n                const user = this.evmUser(address);\n                this.authenticatedAddress = address;\n                setCurrentUser(user);\n                this.markAuthMethod();\n                return user;\n            }\n            // SIWE: nonce -> canonical EIP-4361 prompt -> the wallet personal_sign's it.\n            const nonce = await genAuthNonce();\n            const appId = (await getConfig()).appId;\n            const chainId = (_a = this.config.chainId) !== null && _a !== void 0 ? _a : await this.currentChainId(provider);\n            if (chainId === null)\n                throw new Error('Could not verify the EVM wallet chain for SIWE login');\n            const message = genSiweMessage(address, nonce, appId, this.resolveDomain(), this.resolveUri(), { chainId });\n            // personal_sign(message, address) -> 0x r‖s‖v hex (the shape the\n            // bounded-auth verifier's recoverSiweSigner consumes). The raw UTF-8\n            // message is signed under the EIP-191 envelope the verifier hashes.\n            const signature = await provider.request({\n                method: 'personal_sign',\n                params: [message, address],\n            });\n            const result = await createSessionWithSignature(address, message, signature, SIWE_SESSION_METHOD);\n            await SessionManager().storeSession(address, result.accessToken, result.idToken, result.refreshToken);\n            this.markAuthMethod();\n            const user = this.evmUser(address);\n            this.authenticatedAddress = address;\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    resolveDomain() {\n        const actual = window.location.host.toLowerCase();\n        if (this.config.domain && this.config.domain.toLowerCase() !== actual) {\n            throw new Error('SIWE domain override must match the current browser origin');\n        }\n        return actual;\n    }\n    resolveUri() {\n        const actual = window.location.origin.toLowerCase();\n        if (this.config.uri) {\n            let configured;\n            try {\n                configured = new URL(this.config.uri).origin.toLowerCase();\n            }\n            catch (_a) {\n                throw new Error('SIWE URI override must be an absolute URL');\n            }\n            if (configured !== actual)\n                throw new Error('SIWE URI override must match the current browser origin');\n        }\n        return actual;\n    }\n    markAuthMethod() {\n        setStoredAuthMethod(INJECTED_EVM_AUTH_METHOD);\n    }\n    async restoreSession(beforeCommit) {\n        const session = await SessionManager().getSession();\n        beforeCommit === null || beforeCommit === void 0 ? void 0 : beforeCommit();\n        if (!session)\n            return null;\n        // An EVM-wallet session stores the EVM address as its address; @user.address\n        // (the Solana wallet) is null for this login.\n        const address = normalizeEvmAddress(session.address);\n        if (!address) {\n            await SessionManager().clearSession();\n            return null;\n        }\n        this.authenticatedAddress = address;\n        const user = this.evmUser(address);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // EIP-1193 has no standard disconnect; clearing the Bounded session is the\n        // logout. (wallet_revokePermissions is non-standard/opt-in — skip it.)\n        await SessionManager().clearSession();\n        this.authenticatedAddress = null;\n        setCurrentUser(null);\n    }\n    // --- Signing surface -------------------------------------------------------\n    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */\n    async signMessage(message) {\n        const provider = this.resolveProvider();\n        const address = await this.connectAddress(provider);\n        if (!this.authenticatedAddress || address !== this.authenticatedAddress) {\n            throw new Error('The connected EVM wallet account changed after login. Sign in again before signing.');\n        }\n        return provider.request({ method: 'personal_sign', params: [message, address] });\n    }\n    // Solana-typed methods are structurally unsupported on an EVM wallet, and\n    // this provider is login-only, so there is no transaction surface at all.\n    async signTransaction(_transaction) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async signAndSubmitTransaction(_transaction, _feePayer) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async getNativeMethods() {\n        return this.resolveProvider();\n    }\n}\nInjectedEvmWalletProvider.instance = null;\n"],"names":["defaultInjectedEvmProvider","normalizeEvmAddress","setAuthLoading","SessionManager","setCurrentUser","genAuthNonce","getConfig","genSiweMessage","createSessionWithSignature","setStoredAuthMethod"],"mappings":";;;;;;AAOA;AACA;AACA,MAAM,wBAAwB,GAAG,YAAY;AAC7C;AACA,MAAM,mBAAmB,GAAG,MAAM;AAClC,MAAM,aAAa,GAAG,qGAAqG;AAC3H,IAAI,qEAAqE;AACzE,MAAM,aAAa,GAAG,oFAAoF;AAC1G,IAAI,gFAAgF;AACpF,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE;AACxG,QAAQ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC7E,IAAI;AACJ,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;AACpC;AACO,MAAM,yBAAyB,CAAC;AACvC,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE;AAC7B,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AAC3C,YAAY,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC;AAC1G,QAAQ;AACR,QAAQ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;AAClD;AACA,QAAQ,IAAI,yBAAyB,CAAC,QAAQ,EAAE;AAChD,YAAY,yBAAyB,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU;AAClE,YAAY,yBAAyB,CAAC,QAAQ,CAAC,oBAAoB,GAAG,IAAI;AAC1E,YAAY,OAAO,yBAAyB,CAAC,QAAQ;AACrD,QAAQ;AACR,QAAQ,IAAI,CAAC,MAAM,GAAG,UAAU;AAChC,QAAQ,yBAAyB,CAAC,QAAQ,GAAG,IAAI;AACjD,IAAI;AACJ;AACA;AACA;AACA,IAAI,OAAO,CAAC,OAAO,EAAE;AACrB,QAAQ,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;AAClF,IAAI;AACJ,IAAI,eAAe,GAAG;AACtB,QAAQ,IAAI,EAAE;AACd,QAAQ,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAGA,gCAA0B,EAAE;AAC1J,QAAQ,IAAI,CAAC,QAAQ;AACrB,YAAY,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AAC1C,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAClF,QAAQ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS;AACrE,QAAQ,MAAM,OAAO,GAAGC,wBAAmB,CAAC,GAAG,CAAC;AAChD,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACnF,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACzE,YAAY,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACxE,gBAAgB,OAAO,IAAI;AAC3B,YAAY,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzC,YAAY,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI;AAC9D,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,IAAI,EAAE;AACd,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AACnD,YAAY,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC/D;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMC,4BAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE;AAC1D,gBAAgB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAClD,gBAAgB,IAAI,CAAC,oBAAoB,GAAG,OAAO;AACnD,gBAAgBC,oBAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,IAAI,CAAC,cAAc,EAAE;AACrC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAMC,iBAAY,EAAE;AAC9C,YAAY,MAAM,KAAK,GAAG,CAAC,MAAMC,cAAS,EAAE,EAAE,KAAK;AACnD,YAAY,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3H,YAAY,IAAI,OAAO,KAAK,IAAI;AAChC,gBAAgB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACvF,YAAY,MAAM,OAAO,GAAGC,mBAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACvH;AACA;AACA;AACA,YAAY,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACrD,gBAAgB,MAAM,EAAE,eAAe;AACvC,gBAAgB,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;AAC1C,aAAa,CAAC;AACd,YAAY,MAAM,MAAM,GAAG,MAAMC,+BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC;AAC7G,YAAY,MAAML,4BAAc,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACjH,YAAY,IAAI,CAAC,cAAc,EAAE;AACjC,YAAY,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC9C,YAAY,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC/C,YAAYC,oBAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAYF,oBAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,aAAa,GAAG;AACpB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACzD,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;AAC/E,YAAY,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACzF,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,UAAU,GAAG;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;AAC3D,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;AAC7B,YAAY,IAAI,UAAU;AAC1B,YAAY,IAAI;AAChB,gBAAgB,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;AAC1E,YAAY;AACZ,YAAY,OAAO,EAAE,EAAE;AACvB,gBAAgB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;AAC5E,YAAY;AACZ,YAAY,IAAI,UAAU,KAAK,MAAM;AACrC,gBAAgB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC;AAC1F,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,cAAc,GAAG;AACrB,QAAQO,yBAAmB,CAAC,wBAAwB,CAAC;AACrD,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,YAAY,EAAE;AACvC,QAAQ,MAAM,OAAO,GAAG,MAAMN,4BAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,GAAG,MAAM,GAAG,YAAY,EAAE;AAClF,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB;AACA;AACA,QAAQ,MAAM,OAAO,GAAGF,wBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;AAC5D,QAAQ,IAAI,CAAC,OAAO,EAAE;AACtB,YAAY,MAAME,4BAAc,EAAE,CAAC,YAAY,EAAE;AACjD,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC3C,QAAQ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1C,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQ,MAAMD,4BAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AAC/C,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3D,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,KAAK,IAAI,CAAC,oBAAoB,EAAE;AACjF,YAAY,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,IAAI;AACJ;AACA;AACA,IAAI,MAAM,eAAe,CAAC,YAAY,EAAE;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,YAAY,EAAE,SAAS,EAAE;AAC5D,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,IAAI,CAAC,eAAe,EAAE;AACrC,IAAI;AACJ;AACA,yBAAyB,CAAC,QAAQ,GAAG,IAAI;;;;;"}
+{"version":3,"file":"injected-evm-wallet-provider-D06arDQD.js","sources":["../.rollup-tmp/auth/providers/injected-evm-wallet-provider.js"],"sourcesContent":["import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSiweMessage, getConfig, normalizeEvmAddress, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { setStoredAuthMethod } from '../stored-auth-method';\nimport { defaultInjectedEvmProvider, } from './injected-evm-wallet-types';\n// Re-export the type surface + discovery helper for callers who import the\n// provider module directly.\nexport { defaultInjectedEvmProvider };\n// Must equal the authMethod the registry (auth/index.ts) sets as currentAuthMethod,\n// so clearIncompatibleSession() keeps (not wipes) this session on the next init().\nconst INJECTED_EVM_AUTH_METHOD = 'evm-wallet';\n// The /session issuer's discriminator for the SIWE (EIP-4361 secp256k1) exchange.\nconst SIWE_SESSION_METHOD = 'siwe';\nconst NO_WALLET_ERR = 'No injected EVM wallet found. Install a wallet like MetaMask (metamask.io) or Rabby and try again, ' +\n    'or pass config.evmWalletConfig.getProvider to point at your wallet.';\nconst NO_SOL_TX_ERR = 'EVM wallet login is a LOGIN-ONLY surface (SIWE + personal_sign) and has no Solana ' +\n    'transaction surface: signTransaction/signAndSubmitTransaction are unavailable.';\nfunction normalizeConfig(config) {\n    if (config.chainId !== undefined && (!Number.isSafeInteger(config.chainId) || config.chainId <= 0)) {\n        throw new Error('EVM wallet chainId must be a positive safe integer');\n    }\n    return Object.assign({}, config);\n}\nexport class InjectedEvmWalletProvider {\n    constructor(config = {}) {\n        this.authenticatedAddress = null;\n        if (typeof window === 'undefined') {\n            throw new Error('InjectedEvmWalletProvider can only be instantiated in a browser environment');\n        }\n        const normalized = normalizeConfig(config);\n        // Singleton so the SDK reuses one instance (mirrors the other providers).\n        if (InjectedEvmWalletProvider.instance) {\n            InjectedEvmWalletProvider.instance.config = normalized;\n            InjectedEvmWalletProvider.instance.authenticatedAddress = null;\n            return InjectedEvmWalletProvider.instance;\n        }\n        this.config = normalized;\n        InjectedEvmWalletProvider.instance = this;\n    }\n    // @user.address (the Solana wallet) is null for an EVM-wallet login: the user\n    // authenticated with an EVM wallet and has no Solana address. User.address is\n    // typed `string | null`, so this is a plain null, not a cast.\n    evmUser(address) {\n        return { id: address, address: null, evmAddress: address, provider: this };\n    }\n    resolveProvider() {\n        var _a;\n        const provider = (_a = (this.config.getProvider ? this.config.getProvider() : null)) !== null && _a !== void 0 ? _a : defaultInjectedEvmProvider();\n        if (!provider)\n            throw new Error(NO_WALLET_ERR);\n        return provider;\n    }\n    /** Connect the injected wallet and return its canonical lowercase EVM address. */\n    async connectAddress(provider) {\n        const accounts = await provider.request({ method: 'eth_requestAccounts' });\n        const raw = Array.isArray(accounts) ? accounts[0] : undefined;\n        const address = normalizeEvmAddress(raw);\n        if (!address)\n            throw new Error('Wallet did not return a valid EVM address on connect');\n        return address;\n    }\n    /** Current chain id the wallet is connected to (EIP-155 number), or null. */\n    async currentChainId(provider) {\n        try {\n            const hex = await provider.request({ method: 'eth_chainId' });\n            if (typeof hex !== 'string' || !/^0x[0-9a-fA-F]+$/.test(hex))\n                return null;\n            const n = Number(BigInt(hex));\n            return Number.isSafeInteger(n) && n > 0 ? n : null;\n        }\n        catch (_a) {\n            return null;\n        }\n    }\n    async login() {\n        var _a;\n        setAuthLoading(true);\n        try {\n            const provider = this.resolveProvider();\n            const address = await this.connectAddress(provider);\n            // Reuse a still-valid session for THIS wallet.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === address) {\n                const user = this.evmUser(address);\n                this.authenticatedAddress = address;\n                setCurrentUser(user);\n                this.markAuthMethod();\n                return user;\n            }\n            // SIWE: nonce -> canonical EIP-4361 prompt -> the wallet personal_sign's it.\n            const nonce = await genAuthNonce();\n            const appId = (await getConfig()).appId;\n            const chainId = (_a = this.config.chainId) !== null && _a !== void 0 ? _a : await this.currentChainId(provider);\n            if (chainId === null)\n                throw new Error('Could not verify the EVM wallet chain for SIWE login');\n            const message = genSiweMessage(address, nonce, appId, this.resolveDomain(), this.resolveUri(), { chainId });\n            // personal_sign(message, address) -> 0x r‖s‖v hex (the shape the\n            // bounded-auth verifier's recoverSiweSigner consumes). The raw UTF-8\n            // message is signed under the EIP-191 envelope the verifier hashes.\n            const signature = await provider.request({\n                method: 'personal_sign',\n                params: [message, address],\n            });\n            const result = await createSessionWithSignature(address, message, signature, SIWE_SESSION_METHOD);\n            await SessionManager().storeSession(address, result.accessToken, result.idToken, result.refreshToken);\n            this.markAuthMethod();\n            const user = this.evmUser(address);\n            this.authenticatedAddress = address;\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    resolveDomain() {\n        const actual = window.location.host.toLowerCase();\n        if (this.config.domain && this.config.domain.toLowerCase() !== actual) {\n            throw new Error('SIWE domain override must match the current browser origin');\n        }\n        return actual;\n    }\n    resolveUri() {\n        const actual = window.location.origin.toLowerCase();\n        if (this.config.uri) {\n            let configured;\n            try {\n                configured = new URL(this.config.uri).origin.toLowerCase();\n            }\n            catch (_a) {\n                throw new Error('SIWE URI override must be an absolute URL');\n            }\n            if (configured !== actual)\n                throw new Error('SIWE URI override must match the current browser origin');\n        }\n        return actual;\n    }\n    markAuthMethod() {\n        setStoredAuthMethod(INJECTED_EVM_AUTH_METHOD);\n    }\n    async restoreSession(beforeCommit) {\n        const session = await SessionManager().getSession();\n        beforeCommit === null || beforeCommit === void 0 ? void 0 : beforeCommit();\n        if (!session)\n            return null;\n        // An EVM-wallet session stores the EVM address as its address; @user.address\n        // (the Solana wallet) is null for this login.\n        const address = normalizeEvmAddress(session.address);\n        if (!address) {\n            await SessionManager().clearSession();\n            return null;\n        }\n        this.authenticatedAddress = address;\n        const user = this.evmUser(address);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // EIP-1193 has no standard disconnect; clearing the Bounded session is the\n        // logout. (wallet_revokePermissions is non-standard/opt-in — skip it.)\n        await SessionManager().clearSession();\n        this.authenticatedAddress = null;\n        setCurrentUser(null);\n    }\n    // --- Signing surface -------------------------------------------------------\n    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */\n    async signMessage(message) {\n        const provider = this.resolveProvider();\n        const address = await this.connectAddress(provider);\n        if (!this.authenticatedAddress || address !== this.authenticatedAddress) {\n            throw new Error('The connected EVM wallet account changed after login. Sign in again before signing.');\n        }\n        return provider.request({ method: 'personal_sign', params: [message, address] });\n    }\n    // Solana-typed methods are structurally unsupported on an EVM wallet, and\n    // this provider is login-only, so there is no transaction surface at all.\n    async signTransaction(_transaction) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async signAndSubmitTransaction(_transaction, _feePayer) {\n        throw new Error(NO_SOL_TX_ERR);\n    }\n    async getNativeMethods() {\n        return this.resolveProvider();\n    }\n}\nInjectedEvmWalletProvider.instance = null;\n"],"names":["defaultInjectedEvmProvider","normalizeEvmAddress","setAuthLoading","SessionManager","setCurrentUser","genAuthNonce","getConfig","genSiweMessage","createSessionWithSignature","setStoredAuthMethod"],"mappings":";;;;;;AAOA;AACA;AACA,MAAM,wBAAwB,GAAG,YAAY;AAC7C;AACA,MAAM,mBAAmB,GAAG,MAAM;AAClC,MAAM,aAAa,GAAG,qGAAqG;AAC3H,IAAI,qEAAqE;AACzE,MAAM,aAAa,GAAG,oFAAoF;AAC1G,IAAI,gFAAgF;AACpF,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE;AACxG,QAAQ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC;AAC7E,IAAI;AACJ,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;AACpC;AACO,MAAM,yBAAyB,CAAC;AACvC,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE;AAC7B,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AAC3C,YAAY,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC;AAC1G,QAAQ;AACR,QAAQ,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;AAClD;AACA,QAAQ,IAAI,yBAAyB,CAAC,QAAQ,EAAE;AAChD,YAAY,yBAAyB,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU;AAClE,YAAY,yBAAyB,CAAC,QAAQ,CAAC,oBAAoB,GAAG,IAAI;AAC1E,YAAY,OAAO,yBAAyB,CAAC,QAAQ;AACrD,QAAQ;AACR,QAAQ,IAAI,CAAC,MAAM,GAAG,UAAU;AAChC,QAAQ,yBAAyB,CAAC,QAAQ,GAAG,IAAI;AACjD,IAAI;AACJ;AACA;AACA;AACA,IAAI,OAAO,CAAC,OAAO,EAAE;AACrB,QAAQ,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;AAClF,IAAI;AACJ,IAAI,eAAe,GAAG;AACtB,QAAQ,IAAI,EAAE;AACd,QAAQ,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAGA,gCAA0B,EAAE;AAC1J,QAAQ,IAAI,CAAC,QAAQ;AACrB,YAAY,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AAC1C,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AAClF,QAAQ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS;AACrE,QAAQ,MAAM,OAAO,GAAGC,wBAAmB,CAAC,GAAG,CAAC;AAChD,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACnF,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,QAAQ,EAAE;AACnC,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACzE,YAAY,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACxE,gBAAgB,OAAO,IAAI;AAC3B,YAAY,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzC,YAAY,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI;AAC9D,QAAQ;AACR,QAAQ,OAAO,EAAE,EAAE;AACnB,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,IAAI,EAAE;AACd,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AACnD,YAAY,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC/D;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMC,4BAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE;AAC1D,gBAAgB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAClD,gBAAgB,IAAI,CAAC,oBAAoB,GAAG,OAAO;AACnD,gBAAgBC,oBAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,IAAI,CAAC,cAAc,EAAE;AACrC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAMC,iBAAY,EAAE;AAC9C,YAAY,MAAM,KAAK,GAAG,CAAC,MAAMC,cAAS,EAAE,EAAE,KAAK;AACnD,YAAY,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3H,YAAY,IAAI,OAAO,KAAK,IAAI;AAChC,gBAAgB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC;AACvF,YAAY,MAAM,OAAO,GAAGC,mBAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACvH;AACA;AACA;AACA,YAAY,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACrD,gBAAgB,MAAM,EAAE,eAAe;AACvC,gBAAgB,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;AAC1C,aAAa,CAAC;AACd,YAAY,MAAM,MAAM,GAAG,MAAMC,+BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC;AAC7G,YAAY,MAAML,4BAAc,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACjH,YAAY,IAAI,CAAC,cAAc,EAAE;AACjC,YAAY,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC9C,YAAY,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC/C,YAAYC,oBAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAYF,oBAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,aAAa,GAAG;AACpB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACzD,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;AAC/E,YAAY,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACzF,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,UAAU,GAAG;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;AAC3D,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;AAC7B,YAAY,IAAI,UAAU;AAC1B,YAAY,IAAI;AAChB,gBAAgB,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;AAC1E,YAAY;AACZ,YAAY,OAAO,EAAE,EAAE;AACvB,gBAAgB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC;AAC5E,YAAY;AACZ,YAAY,IAAI,UAAU,KAAK,MAAM;AACrC,gBAAgB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC;AAC1F,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,IAAI;AACJ,IAAI,cAAc,GAAG;AACrB,QAAQO,yBAAmB,CAAC,wBAAwB,CAAC;AACrD,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,YAAY,EAAE;AACvC,QAAQ,MAAM,OAAO,GAAG,MAAMN,4BAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,GAAG,MAAM,GAAG,YAAY,EAAE;AAClF,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB;AACA;AACA,QAAQ,MAAM,OAAO,GAAGF,wBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;AAC5D,QAAQ,IAAI,CAAC,OAAO,EAAE;AACtB,YAAY,MAAME,4BAAc,EAAE,CAAC,YAAY,EAAE;AACjD,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,IAAI,CAAC,oBAAoB,GAAG,OAAO;AAC3C,QAAQ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1C,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQ,MAAMD,4BAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQ,IAAI,CAAC,oBAAoB,GAAG,IAAI;AACxC,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;AAC/C,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;AAC3D,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,OAAO,KAAK,IAAI,CAAC,oBAAoB,EAAE;AACjF,YAAY,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC;AAClH,QAAQ;AACR,QAAQ,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,IAAI;AACJ;AACA;AACA,IAAI,MAAM,eAAe,CAAC,YAAY,EAAE;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,YAAY,EAAE,SAAS,EAAE;AAC5D,QAAQ,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,IAAI,CAAC,eAAe,EAAE;AACrC,IAAI;AACJ;AACA,yBAAyB,CAAC,QAAQ,GAAG,IAAI;;;;;"}

package/dist/{injected-wallet-provider-BEYwsn6M.js → injected-wallet-provider-B9jvzDM5.js}

@@ -1,7 +1,7 @@
 'use strict';
 
 var core = require('@bounded-sh/core');
-var index = require('./index-DJeEMevo.js');
+var index = require('./index-BZ0X1Z9X.js');
 require('react');
 
 const crypto = typeof globalThis === 'object' && 'crypto' in globalThis ? globalThis.crypto : undefined;
@@ -2467,37 +2467,66 @@ class InjectedWalletProvider {
             throw new Error('Wallet did not return a public key on connect');
         return pk.toString();
     }
+    /**
+     * The account the wallet already holds open for this page, named WITHOUT a
+     * prompt: a live connection, else a silent connect (an injected wallet that
+     * still trusts the page; the mobile wallet's cached authorization, read from
+     * storage). Null when the wallet would have to ask the user.
+     */
+    async trustedAddress(provider) {
+        try {
+            return await this.connectAddress(provider, true);
+        }
+        catch (_a) {
+            return null;
+        }
+    }
     async login() {
+        var _a;
         index.setAuthLoading(true);
         try {
             const provider = this.resolveProvider();
-            const address = await this.connectAddress(provider);
-            // Reuse a still-valid session for THIS wallet.
-            const existing = await core.getActiveSessionManager().getSession();
-            if (existing && existing.address === address) {
-                const user = { address, id: address, provider: this };
-                this.authenticatedAddress = address;
+            // SEC-01: a wallet without Sign In With Solana is refused before it is
+            // asked anything, never downgraded to plain message signing.
+            if (typeof provider.signIn !== 'function')
+                throw new Error(WALLET_SIGN_IN_UNSUPPORTED_ERR);
+            // Reuse a still-valid session for THIS wallet, when the wallet names its
+            // account without prompting. Nothing here opens the wallet: the sign-in
+            // below is the one interactive step of a login.
+            const trusted = await this.trustedAddress(provider);
+            const existing = trusted ? await core.getActiveSessionManager().getSession() : null;
+            if (trusted && existing && existing.address === trusted) {
+                const user = { address: trusted, id: trusted, provider: this };
+                this.authenticatedAddress = trusted;
                 index.setCurrentUser(user);
                 this.markAuthMethod();
                 return user;
             }
-            // Sign In With Solana (SEC-01): the wallet renders the standard sign-in
-            // text and, with the domain left unset here, stamps THIS page's host; the
-            // issuer refuses any other domain for the request's Origin, so a phishing
-            // page cannot obtain a login for another site. Bounded chooses only the nonce,
-            // the validity window and the app id (Request ID); a wallet without the
-            // feature is refused, never downgraded to plain message signing. The
-            // nonce is fetched HERE, after connect, on purpose: a network round trip
-            // before the wallet handoff decays the transient activation the mobile
-            // wallet's intent navigation needs.
-            if (typeof provider.signIn !== 'function')
-                throw new Error(WALLET_SIGN_IN_UNSUPPORTED_ERR);
+            // Sign In With Solana (SEC-01) is connect and sign in ONE wallet step:
+            // the wallet authorizes an account, renders the standard sign-in text
+            // for it and, with the domain left unset here, stamps THIS page's host;
+            // the issuer refuses any other domain for the request's Origin, so a
+            // phishing page cannot obtain a login for another site. Bounded chooses
+            // only the nonce, the validity window and the app id (Request ID).
+            // No separate connect comes first: the mobile adapter would answer the
+            // sign-in from the authorization that connect cached, with no sign-in
+            // result in it, and a second wallet prompt is friction for every other
+            // wallet. The nonce is fetched BEFORE the gesture below, so nothing
+            // async sits between the tap and the wallet handoff - a network round
+            // trip there decays the transient activation the mobile wallet's intent
+            // navigation needs.
             const nonce = await core.genAuthNonce();
             const request = await core.genSolanaSignInRequest(nonce);
-            await this.freshActivation(provider, 'login', address);
+            await this.freshActivation(provider, 'login', trusted);
             const signedIn = normalizeSignInOutput(await provider.signIn(request));
-            if (signedIn.account.address !== address) {
-                throw new Error(`The wallet signed in as ${signedIn.account.address}, not the connected account ${address}. Sign in again.`);
+            const address = signedIn.account.address;
+            // The account the wallet now reports as open must be the one that signed
+            // in: a proof for another account would bind this session to an identity
+            // the wallet is not acting as (DS2-0369). A wallet that reports no account
+            // leaves the sign-in output as the only word on which one it is.
+            const active = (_a = provider.publicKey) === null || _a === void 0 ? void 0 : _a.toString();
+            if (active && active !== address) {
+                throw new Error(`The wallet signed in as ${address}, not the connected account ${active}. Sign in again.`);
             }
             // The issuer verifies the signature over the EXACT bytes the wallet signed
             // and parses them, so the text travels as the wallet rendered it.
@@ -2817,4 +2846,4 @@ class InjectedWalletProvider {
 exports.defaultInjectedProvider = index.defaultInjectedProvider;
 exports.InjectedWalletProvider = InjectedWalletProvider;
 exports.WALLET_SIGN_IN_UNSUPPORTED_ERR = WALLET_SIGN_IN_UNSUPPORTED_ERR;
-//# sourceMappingURL=injected-wallet-provider-BEYwsn6M.js.map
+//# sourceMappingURL=injected-wallet-provider-B9jvzDM5.js.map