@bounded-sh/client 0.0.113 → 0.0.115

package/dist/index.d.ts

@@ -46,12 +46,14 @@ export type { TurnkeyEmailLoginHandle } from "./auth/turnkey-auth";
 export { getIdToken } from "./utils";
 export { onramp, onrampQuote, onrampStatus } from "./onramp";
 export type { OnrampOptions, OnrampResult, OnrampQuoteInfo, OnrampTransaction } from "./onramp";
+export { fundVenueEscrow, disputeVenueEscrow, getVenueEscrow, VenueEscrowError } from "./venue-escrow";
+export type { VenueEscrowTerms, VenueEscrowFunded, VenueEscrowDisputed, VenueEscrow, VenueEscrowState, VenueEscrowErrorCode, } from "./venue-escrow";
 export { setPlatform, getPlatform } from "./platform";
 export type { PlatformAdapter, StorageAdapter } from "./platform";
 export { OffchainAuthProvider, OffchainAuthProviderConfig, } from "./auth/providers/offchain-auth-provider";
 export { PrivyExpoProvider } from "./auth/providers/privy-expo-provider";
 export type { PrivyExpoMethods } from "./auth/providers/privy-expo-provider";
-export { defaultInjectedProvider } from "./auth/providers/injected-wallet-types";
+export { defaultInjectedProvider, supportsWalletSignIn } from "./auth/providers/injected-wallet-types";
 export type { InjectedWalletConfig, InjectedSolanaProvider, } from "./auth/providers/injected-wallet-types";
 export type { InjectedWalletProvider } from "./auth/providers/injected-wallet-provider";
 export { defaultInjectedEvmProvider, requestEip6963Providers, } from "./auth/providers/injected-evm-wallet-types";

package/dist/index.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-BZ0X1Z9X.js');
+var index = require('./index-nU0ZSfWs.js');
 var core = require('@bounded-sh/core');
 require('react');
 
@@ -17,6 +17,7 @@ exports.PARK_REASONS = index.PARK_REASONS;
 exports.PrivyExpoProvider = index.PrivyExpoProvider;
 exports.RUN_STATES = index.RUN_STATES;
 exports.TERMINAL_STATES = index.TERMINAL_STATES;
+exports.VenueEscrowError = index.VenueEscrowError;
 exports.WalletConfigError = index.WalletConfigError;
 exports.apps = index.apps;
 exports.builds = index.builds;
@@ -25,9 +26,11 @@ exports.connectBroadcast = index.connectBroadcast;
 exports.connectServiceSession = index.connectServiceSession;
 exports.defaultInjectedEvmProvider = index.defaultInjectedEvmProvider;
 exports.defaultInjectedProvider = index.defaultInjectedProvider;
+exports.disputeVenueEscrow = index.disputeVenueEscrow;
 exports.ensureSharedWalletLoginReady = index.ensureSharedWalletLoginReady;
 exports.ensureSignedIn = index.ensureSignedIn;
 exports.ensureWalletLoginReady = index.ensureWalletLoginReady;
+exports.fundVenueEscrow = index.fundVenueEscrow;
 exports.getAuthLoading = index.getAuthLoading;
 exports.getAuthProvider = index.getAuthProvider;
 exports.getCurrentUser = index.getCurrentUser;
@@ -37,6 +40,7 @@ exports.getOrCreateTurnkeyWallet = index.getOrCreateTurnkeyWallet;
 exports.getPlatform = index.getPlatform;
 exports.getTurnkeyWalletRecoveryUrl = index.getTurnkeyWalletRecoveryUrl;
 exports.getTurnkeyWalletSessionState = index.getTurnkeyWalletSessionState;
+exports.getVenueEscrow = index.getVenueEscrow;
 exports.init = index.init;
 exports.login = index.login;
 exports.loginWithPopup = index.loginWithPopup;
@@ -58,6 +62,7 @@ exports.setPlatform = index.setPlatform;
 exports.signInAnonymously = index.signInAnonymously;
 exports.signSolanaMessageViaTurnkey = index.signSolanaMessageViaTurnkey;
 exports.startTurnkeyEmailLogin = index.startTurnkeyEmailLogin;
+exports.supportsWalletSignIn = index.supportsWalletSignIn;
 exports.useAuth = index.useAuth;
 exports.useBuildRun = index.useBuildRun;
 exports.useQuery = index.useQuery;

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { ag as BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA, af as BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA, ae as BUILD_REVIEW_CAPABILITY_SCHEMA, a7 as BuildsApiError, ad as FAILURE_REASONS, a9 as NON_TERMINAL_STATES, a1 as OffchainAuthProvider, ac as PARK_REASONS, a2 as PrivyExpoProvider, ab as RUN_STATES, aa as TERMINAL_STATES, W as WalletConfigError, Q as apps, a6 as builds, I as completeLoginFromRedirect, a4 as connectBroadcast, a5 as connectServiceSession, o as defaultInjectedEvmProvider, f as defaultInjectedProvider, F as ensureSharedWalletLoginReady, M as ensureSignedIn, E as ensureWalletLoginReady, w as getAuthLoading, A as getAuthProvider, q as getCurrentUser, Y as getIdToken, J as getLoginReturnError, S as getOrCreateTurnkeyWallet, g as getPlatform, V as getTurnkeyWalletRecoveryUrl, U as getTurnkeyWalletSessionState, p as init, y as login, K as loginWithPopup, C as loginWithPrivy, H as loginWithRedirect, D as loginWithWallet, z as logout, a8 as mediaAgentTools, v as onAuthLoadingChanged, u as onAuthStateChanged, Z as onramp, _ as onrampQuote, $ as onrampStatus, L as openBoundedWidget, T as openTurnkeyKeyExport, G as preloadWalletLogin, a3 as requestEip6963Providers, a0 as setPlatform, B as signInAnonymously, R as signSolanaMessageViaTurnkey, X as startTurnkeyEmailLogin, N as useAuth, P as useBuildRun, O as useQuery, x as waitForAuthReady } from './index-BAiLpNEQ.mjs';
+export { am as BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA, al as BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA, ak as BUILD_REVIEW_CAPABILITY_SCHEMA, ad as BuildsApiError, aj as FAILURE_REASONS, af as NON_TERMINAL_STATES, a7 as OffchainAuthProvider, ai as PARK_REASONS, a8 as PrivyExpoProvider, ah as RUN_STATES, ag as TERMINAL_STATES, a5 as VenueEscrowError, W as WalletConfigError, R as apps, ac as builds, J as completeLoginFromRedirect, aa as connectBroadcast, ab as connectServiceSession, p as defaultInjectedEvmProvider, f as defaultInjectedProvider, a3 as disputeVenueEscrow, G as ensureSharedWalletLoginReady, N as ensureSignedIn, F as ensureWalletLoginReady, a2 as fundVenueEscrow, x as getAuthLoading, B as getAuthProvider, u as getCurrentUser, _ as getIdToken, K as getLoginReturnError, U as getOrCreateTurnkeyWallet, g as getPlatform, Y as getTurnkeyWalletRecoveryUrl, X as getTurnkeyWalletSessionState, a4 as getVenueEscrow, q as init, z as login, L as loginWithPopup, D as loginWithPrivy, I as loginWithRedirect, E as loginWithWallet, A as logout, ae as mediaAgentTools, w as onAuthLoadingChanged, v as onAuthStateChanged, $ as onramp, a0 as onrampQuote, a1 as onrampStatus, M as openBoundedWidget, V as openTurnkeyKeyExport, H as preloadWalletLogin, a9 as requestEip6963Providers, a6 as setPlatform, C as signInAnonymously, T as signSolanaMessageViaTurnkey, Z as startTurnkeyEmailLogin, k as supportsWalletSignIn, O as useAuth, Q as useBuildRun, P as useQuery, y as waitForAuthReady } from './index-C63ceG_z.mjs';
 export * from '@bounded-sh/core';
 export { AppTokenExchangeError, BoundedDeclineError, DECLINE_EVENT_NAME, RATE_LIMIT_EVENT_NAME, ScopedClientReadOnlyError, aggregate, clearAppTokenCache, count, createAppTokenAuthHeaders, createClient, deriveDecline, dispatchDeclineEvent, dispatchRateLimitEvent, docId, exchangeAppToken, get, getConfig, getFiles, getMany, queryAggregate, reconcileSetResult, runExpression, runExpressionMany, runQuery, runQueryMany, search, set, setFile, setMany, signAndSubmitTransaction, signMessage, signTransaction, subscribe, waitForSetResult } from '@bounded-sh/core';
 import 'react';

package/dist/{index.native-DJSOqyKQ.js → index.native-BBLBnqal.js}

@@ -4400,6 +4400,47 @@ async function openHiddenSignerFrame(page) {
     };
 }
 
+// turnkey-signer-window.ts - the top-level Bounded signer window: opening it, and reserving it
+// inside a click for an approval that is reached only after awaits.
+//
+// A cross-app Turnkey signature (the capability says `transport: 'popup'`) cannot run in the
+// in-app frame, so it opens in its own window, and a browser opens a window only inside the
+// user's click. The click handler therefore calls `reserveSignerPopup()` first, before any
+// `await`, and the exchange in turnkey-signer-bridge.ts navigates that window to the signer later.
+//
+// Kept out of the bridge on purpose: the bridge is loaded lazily as a whole module, so a bundler
+// keeps every one of its exports in every app that signs, while this reservation is needed only
+// by an app that funds an escrow.
+function openSignerWindow(url, w = 420, h = 620) {
+    const left = window.screenX + Math.max(0, (window.outerWidth - w) / 2);
+    const top = window.screenY + Math.max(0, (window.outerHeight - h) / 2);
+    return window.open(url, 'bounded-turnkey-signer', `width=${w},height=${h},left=${left},top=${top}`);
+}
+// One slot: the next popup exchange takes it, and a new reservation replaces an unused earlier one.
+// A property of a const rather than a reassigned `let`, which a bundler would keep every assignment
+// to, dragging the reservation into apps that never reserve.
+const reserved = { popup: null };
+/** Hand the reserved window, if one is held, to an exchange: navigated to the signer page at `url`. */
+function takeReservedPopup(url) {
+    const popup = reserved.popup;
+    reserved.popup = null;
+    if (!popup)
+        return null;
+    if (popup.closed)
+        throw new Error('Wallet approval window was closed before it completed.');
+    try {
+        popup.location.replace(url);
+    }
+    catch (_a) {
+        try {
+            popup.close();
+        }
+        catch ( /* ignore */_b) { /* ignore */ }
+        throw new Error('Wallet approval window could not open the signer - retry from a click.');
+    }
+    return popup;
+}
+
 // turnkey-signing-capability.ts - the pure AS-02 (DS2-0112) signing-capability logic,
 // kept import-free (no DOM, no session, no @bounded-sh/core) so it is unit-testable.
 //
@@ -4411,9 +4452,10 @@ async function openHiddenSignerFrame(page) {
 // so a regression here (a dropped capability, a wrong route, a swallowed error) is
 // caught without a browser.
 // POST the Bounded id token + payload hash to the issuer's capability mint route and
-// return the issuer-signed capability for exactly these bytes. Credential-free: identity
-// is proven with the id token in the body (not an ambient cookie the cross-origin fetch
-// would not carry). Throws with the same stable messages the bridge relied on inline.
+// return the issuer-signed capability for exactly these bytes, with the transport the
+// issuer requires for them. Credential-free: identity is proven with the id token in the
+// body (not an ambient cookie the cross-origin fetch would not carry). Throws with the same
+// stable messages the bridge relied on inline.
 async function requestTurnkeySigningCapability(opts) {
     const base = opts.baseUrl.replace(/\/$/, '');
     let res;
@@ -4443,7 +4485,7 @@ async function requestTurnkeySigningCapability(opts) {
     if (!d || typeof d.capability !== 'string' || !d.capability) {
         throw new Error('Turnkey signing capability was malformed.');
     }
-    return d.capability;
+    return d.transport === 'popup' ? { capability: d.capability, transport: 'popup' } : { capability: d.capability };
 }
 // Assemble the `bounded:turnkey:sign` postMessage request, carrying the issuer-signed
 // capability for the same bytes. Without the capability the hosted signer refuses
@@ -4522,12 +4564,16 @@ function hasDOM$2() {
 // when we cannot embed (no DOM, or the frame never mounts/loads). Nothing in the
 // email-session flow needs a popup by preference: the code entry and the approval
 // click both run fine inside a cross-origin iframe on every engine (the old
-// Safari popup preference existed only for in-iframe WebAuthn CREATE).
+// Safari popup preference existed only for in-iframe WebAuthn CREATE). The one
+// exception is a signature the issuer marks `transport: 'popup'` (a cross-app
+// write): the hosted signer refuses it inside any frame, so it never touches the widget.
 async function deliver(url, origin, ex) {
     var _a, _b;
     const popup = () => runPopup(url, origin, ex);
     (_a = ex.assertCurrent) === null || _a === void 0 ? void 0 : _a.call(ex);
-    const result = await runWidget(url, origin, { request: ex.request, onResult: ex.onResult, context: ex.context, assertCurrent: ex.assertCurrent }, popup);
+    const result = ex.transport === 'popup'
+        ? await popup()
+        : await runWidget(url, origin, { request: ex.request, onResult: ex.onResult, context: ex.context, assertCurrent: ex.assertCurrent }, popup);
     (_b = ex.assertCurrent) === null || _b === void 0 ? void 0 : _b.call(ex);
     return result;
 }
@@ -4592,14 +4638,12 @@ function activeTurnkeyAddress() {
         : null;
 }
 let requestSeq = 0;
-// Shared popup driver: open the signer page, do the ready/postMessage handshake, and
-// resolve when `onResult` accepts a result message. Origin + source are pinned.
+// Shared popup driver: open the signer page (in the reserved window when one is held), do the
+// ready/postMessage handshake, and resolve when `onResult` accepts a result message. Origin +
+// source are pinned.
 async function runPopup(url, signerOrigin, ex) {
-    var _a, _b;
-    const w = (_a = ex.width) !== null && _a !== void 0 ? _a : 420, h = (_b = ex.height) !== null && _b !== void 0 ? _b : 620;
-    const left = window.screenX + Math.max(0, (window.outerWidth - w) / 2);
-    const top = window.screenY + Math.max(0, (window.outerHeight - h) / 2);
-    const popup = window.open(url, 'bounded-turnkey-signer', `width=${w},height=${h},left=${left},top=${top}`);
+    var _a;
+    const popup = (_a = takeReservedPopup(url)) !== null && _a !== void 0 ? _a : openSignerWindow(url, ex.width, ex.height);
     if (!popup) {
         throw new Error('Popup blocked - call this from a user gesture (e.g. a click handler) so the wallet approval window can open.');
     }
@@ -4777,7 +4821,7 @@ async function signSolanaMessageViaTurnkey(message) {
     const messageHex = toHex(message);
     // AS-02: obtain the issuer-signed capability for THESE exact bytes first; the signer will
     // refuse (capability_required) without it. Fetched per signature (each is single-payload).
-    const capability = await fetchSigningCapability(messageHex, context);
+    const { capability, transport } = await fetchSigningCapability(messageHex, context);
     // Inline (authMode:"turnkey") sessions plant no Better Auth cookie on the issuer, so the
     // signer's same-origin status/create fetches need a bearer session proof: attach the
     // createWallet action authorization (it covers the sign flow's get-or-create too). Minted
@@ -4786,11 +4830,20 @@ async function signSolanaMessageViaTurnkey(message) {
     return await deliver(url, origin, {
         context: context.key, assertCurrent: context.assertCurrent,
         request: buildTurnkeySignRequest({ requestId, messageHex, capability, authorization }),
+        transport,
         onResult: (d) => {
             if (d.ok && typeof d.signatureHex === 'string' && typeof d.address === 'string') {
-                setWalletSessionState(context.key, { expiresAt: Number(d.signingSessionExpiresAt) });
+                // A top-level popup keeps its signing session in the signer origin's own storage, which the
+                // warm in-app frame (a partitioned context) cannot see, so it says nothing about that frame.
+                if (transport !== 'popup')
+                    setWalletSessionState(context.key, { expiresAt: Number(d.signingSessionExpiresAt) });
                 return { done: true, value: { signature: fromHex(d.signatureHex), address: d.address, subOrgId: String(d.subOrgId || '') } };
             }
+            // The hosted signer refuses a cross-app signature inside a frame. Never retry it from here:
+            // the top-level window needs the user's own click.
+            if (d.error === 'top_level_required') {
+                return { error: 'top_level_required: an approval that writes to another app must open in its own window. Start it from a click handler.' };
+            }
             return { error: String(d.error || 'Turnkey signing failed') };
         },
     });
@@ -6036,7 +6089,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // manager as legacy email sessions. Human login should be started
             // with loginWithRedirect(); this provider is kept as the restore and
             // logout surface for those sessions.
-            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./email-auth-provider-Cr66GaKw.js'); })).EmailAuthProvider();
+            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./email-auth-provider-CwG04f4u.js'); })).EmailAuthProvider();
             break;
         case "phantom": {
             // First-class Solana WALLET LOGIN (the poof/TaroBase-style "connect
@@ -6078,7 +6131,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // (bounded-login-widget.ts), so registration never counts as
             // evidence the user has a wallet.
             await ensureSolanaMobileWalletRegistered(config, configuredNetwork);
-            const { InjectedWalletProvider } = await Promise.resolve().then(function () { return require('./injected-wallet-provider-Dqmk-m4V.js'); });
+            const { InjectedWalletProvider } = await Promise.resolve().then(function () { return require('./injected-wallet-provider-BvlKZoVJ.js'); });
             currentAuthProvider = new InjectedWalletProvider(resolveInjectedWalletConfig(config), rpcUrl, configuredNetwork);
             break;
         }
@@ -6091,7 +6144,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // Selecting authMethod:'evm-wallet' IS the opt-in — pass evmWalletConfig
             // to point at a specific wallet or set chainId/domain.
             const evmWalletConfig = ((_a = config.evmWalletConfig) !== null && _a !== void 0 ? _a : {});
-            const { InjectedEvmWalletProvider } = await Promise.resolve().then(function () { return require('./injected-evm-wallet-provider-BDYWjIOQ.js'); });
+            const { InjectedEvmWalletProvider } = await Promise.resolve().then(function () { return require('./injected-evm-wallet-provider-C6KC7pJ6.js'); });
             currentAuthProvider = new InjectedEvmWalletProvider(evmWalletConfig);
             break;
         }
@@ -6116,7 +6169,7 @@ async function getAuthProvider(config, fromStorage = false) {
             break;
         case "guest":
             // Anonymous auth: a device-local ed25519 keypair signs the challenge.
-            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-CUNkZVFK.js'); })).GuestAuthProvider();
+            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-3rfSwq3f.js'); })).GuestAuthProvider();
             break;
     }
     if (!currentAuthProvider) {
@@ -6178,7 +6231,7 @@ async function signInAnonymously() {
     // Lazy-load the guest provider so its ed25519/web3 dependencies stay out of
     // the main bundle for data-only apps. Specifier is a static string literal
     // so bundle-splitting can see it.
-    const provider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-CUNkZVFK.js'); })).GuestAuthProvider();
+    const provider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-3rfSwq3f.js'); })).GuestAuthProvider();
     setAuthLoading(true); // reflect "signing in…" while the guest keypair session is minted
     // adoptSessionProvider awaits only getConfig() (already resolved here) and then
     // runs every write - provider/method/config/marker/user - in one synchronous
@@ -6349,7 +6402,7 @@ function ensureSharedWalletLoginReady() {
     if (!sharedWalletReady) {
         sharedWalletReady = (async () => {
             await core.getConfig();
-            await Promise.resolve().then(function () { return require('./injected-wallet-provider-Dqmk-m4V.js'); });
+            await Promise.resolve().then(function () { return require('./injected-wallet-provider-BvlKZoVJ.js'); });
         })().catch((error) => {
             sharedWalletReady = null;
             throw error;
@@ -8905,4 +8958,4 @@ exports.useBuildRun = useBuildRun;
 exports.useQuery = useQuery;
 exports.waitForAuthReady = waitForAuthReady;
 exports.walletStandardFeatureName = walletStandardFeatureName;
-//# sourceMappingURL=index.native-DJSOqyKQ.js.map
+//# sourceMappingURL=index.native-BBLBnqal.js.map