@bounded-sh/client 0.0.117-sync.0 → 0.0.118-openapps.0

package/dist/{index-BmBLsYn2.mjs → index-q9BHoxbM.mjs}

@@ -6475,7 +6475,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // manager as legacy email sessions. Human login should be started
             // with loginWithRedirect(); this provider is kept as the restore and
             // logout surface for those sessions.
-            currentAuthProvider = new (await import('./email-auth-provider-CmbRj-_I.mjs')).EmailAuthProvider();
+            currentAuthProvider = new (await import('./email-auth-provider-C-SGTRZe.mjs')).EmailAuthProvider();
             break;
         case "phantom": {
             // First-class Solana WALLET LOGIN (the poof/TaroBase-style "connect
@@ -6517,7 +6517,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // (bounded-login-widget.ts), so registration never counts as
             // evidence the user has a wallet.
             await ensureSolanaMobileWalletRegistered(config, configuredNetwork);
-            const { InjectedWalletProvider } = await import('./injected-wallet-provider-DwozZ926.mjs');
+            const { InjectedWalletProvider } = await import('./injected-wallet-provider-gmGZ254w.mjs');
             currentAuthProvider = new InjectedWalletProvider(resolveInjectedWalletConfig(config), rpcUrl, configuredNetwork);
             break;
         }
@@ -6530,7 +6530,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // Selecting authMethod:'evm-wallet' IS the opt-in — pass evmWalletConfig
             // to point at a specific wallet or set chainId/domain.
             const evmWalletConfig = ((_a = config.evmWalletConfig) !== null && _a !== void 0 ? _a : {});
-            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-B2xteR2I.mjs');
+            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-AXc7Lmzk.mjs');
             currentAuthProvider = new InjectedEvmWalletProvider(evmWalletConfig);
             break;
         }
@@ -6555,7 +6555,7 @@ async function getAuthProvider(config, fromStorage = false) {
             break;
         case "guest":
             // Anonymous auth: a device-local ed25519 keypair signs the challenge.
-            currentAuthProvider = new (await import('./guest-auth-provider-Bvoaq-zC.mjs')).GuestAuthProvider();
+            currentAuthProvider = new (await import('./guest-auth-provider-BwEXKnNK.mjs')).GuestAuthProvider();
             break;
     }
     if (!currentAuthProvider) {
@@ -6617,7 +6617,7 @@ async function signInAnonymously() {
     // Lazy-load the guest provider so its ed25519/web3 dependencies stay out of
     // the main bundle for data-only apps. Specifier is a static string literal
     // so bundle-splitting can see it.
-    const provider = new (await import('./guest-auth-provider-Bvoaq-zC.mjs')).GuestAuthProvider();
+    const provider = new (await import('./guest-auth-provider-BwEXKnNK.mjs')).GuestAuthProvider();
     setAuthLoading(true); // reflect "signing in…" while the guest keypair session is minted
     // adoptSessionProvider awaits only getConfig() (already resolved here) and then
     // runs every write - provider/method/config/marker/user - in one synchronous
@@ -6788,7 +6788,7 @@ function ensureSharedWalletLoginReady() {
     if (!sharedWalletReady) {
         sharedWalletReady = (async () => {
             await getConfig();
-            await import('./injected-wallet-provider-DwozZ926.mjs');
+            await import('./injected-wallet-provider-gmGZ254w.mjs');
         })().catch((error) => {
             sharedWalletReady = null;
             throw error;
@@ -6893,7 +6893,7 @@ async function loginWithWallet(options) {
         await ensureSharedWalletLoginReady();
     else
         await ensureWalletLoginReady();
-    const { InjectedWalletProvider } = await import('./injected-wallet-provider-DwozZ926.mjs');
+    const { InjectedWalletProvider } = await import('./injected-wallet-provider-gmGZ254w.mjs');
     // Keep the RAW wallet provider: the offchain wrapper forwards only a fixed
     // set of methods, so cleanup below must speak to the provider that actually
     // holds the config rather than to whatever is wrapping it.
@@ -8431,6 +8431,18 @@ function walletGlyph() {
     svg.append(rect, dot);
     return svg;
 }
+/** Whether the card shows "Powered by Bounded": the caller decides, else it is off on OpenApps pages. */
+function showsAttribution(opts) {
+    if (typeof opts.attribution === "boolean")
+        return opts.attribution;
+    try {
+        const host = location.hostname.toLowerCase();
+        return !(host === "openapps.xyz" || host.endsWith(".openapps.xyz"));
+    }
+    catch (_a) {
+        return true;
+    }
+}
 function isInjectedProvider(v) {
     return supportsWalletSignIn(v);
 }
@@ -9070,13 +9082,15 @@ async function prepareAndOpen(opts, pending) {
                         : "Add a method, or make sure wallet login is enabled and the mobile adapter is installed."));
             }
             card.appendChild(status);
-            const foot = el("div", "foot");
-            const poweredBy = el("a", undefined, "Powered by Bounded");
-            poweredBy.href = "https://bounded.sh";
-            poweredBy.target = "_blank";
-            poweredBy.rel = "noopener";
-            foot.appendChild(poweredBy);
-            card.appendChild(foot);
+            if (showsAttribution(opts)) {
+                const foot = el("div", "foot");
+                const poweredBy = el("a", undefined, "Powered by Bounded");
+                poweredBy.href = "https://bounded.sh";
+                poweredBy.target = "_blank";
+                poweredBy.rel = "noopener";
+                foot.appendChild(poweredBy);
+                card.appendChild(foot);
+            }
             return card;
         };
         // Solana Mobile leaves the page to sign in: the nonce fetch that precedes
@@ -9229,13 +9243,15 @@ async function prepareAndOpen(opts, pending) {
             frame.style.cssText = "width:100%;height:210px;border:0;background:transparent;color-scheme:dark";
             card.appendChild(frame);
             card.appendChild(status);
-            const foot = el("div", "foot");
-            const poweredBy = el("a", undefined, "Powered by Bounded");
-            poweredBy.href = "https://bounded.sh";
-            poweredBy.target = "_blank";
-            poweredBy.rel = "noopener";
-            foot.appendChild(poweredBy);
-            card.appendChild(foot);
+            if (showsAttribution(opts)) {
+                const foot = el("div", "foot");
+                const poweredBy = el("a", undefined, "Powered by Bounded");
+                poweredBy.href = "https://bounded.sh";
+                poweredBy.target = "_blank";
+                poweredBy.rel = "noopener";
+                foot.appendChild(poweredBy);
+                card.appendChild(foot);
+            }
             // Running the frame MINTS a session, so it takes the lock like every other lane. Abandoning
             // via Back settles it so the next lane the user picks is not refused by a claim nobody owns.
             const attempt = beginAttempt();
@@ -10774,6 +10790,133 @@ async function onramp(options = {}) {
     return Object.assign(Object.assign({}, base), { status: 'closed' });
 }
 
+// Connections: the signed-in user proves they own an account on another service
+// (X today) and Bounded records it for THIS app at `__connections__/<userId>`.
+// Policy rules read it, e.g. `get(/__connections__/@user.id).xHandle`; only the
+// platform can write it, and only after the provider's own consent screen.
+//
+//   await connect('x')                    // leaves the page for X's consent screen
+//   const done = await completeConnection() // on the page X sent the user back to
+//   const { x } = await getConnections()  // { id, handle, imageUrl, linkedAt } | null
+//   await disconnect('x')
+//
+// Only identity is kept: the provider token is discarded after one profile read.
+// The return page must be on an origin that serves this app (its bounded.page or
+// custom domain, or an origin the owner registered, such as localhost).
+/**
+ * `code` is the platform's error code, e.g. `cancelled`, `x_link_expired`, `connection_return_origin_not_allowed`,
+ * or `x_account_linked_elsewhere` when the app's policy sets `auth.connections.x.unique` and another user
+ * of the app already linked that X account.
+ */
+class ConnectionError extends Error {
+    constructor(code) {
+        super(`Connection failed: ${code}`);
+        this.code = code;
+        this.name = 'ConnectionError';
+    }
+}
+const RETURN_PARAMS = ['x_link', 'x_link_error'];
+async function request(path, init) {
+    var _a;
+    const base = (_a = (await getConfig()).devApiUrl) === null || _a === void 0 ? void 0 : _a.replace(/\/$/, '');
+    if (!base)
+        throw new ConnectionError('connection_unavailable');
+    const generation = await getSessionGeneration(false);
+    let token = await getFreshAuthToken(false);
+    if (!token)
+        throw new ConnectionError('connection_sign_in_required');
+    const send = (bearer) => fetch(`${base}${path}`, Object.assign({ method: init.method, headers: Object.assign({ Authorization: `Bearer ${bearer}` }, (init.body === undefined ? {} : { 'Content-Type': 'application/json' })) }, (init.body === undefined ? {} : { body: JSON.stringify(init.body) })));
+    let response = await send(token);
+    if (response.status === 401) {
+        // Retry once with a refreshed token, never under a different login.
+        token = await getFreshAuthToken(false, { force: true });
+        if (!token || await getSessionGeneration(false) !== generation)
+            throw new ConnectionError('connection_sign_in_required');
+        response = await send(token);
+    }
+    const data = await response.json().catch(() => null);
+    if (!response.ok || (data === null || data === void 0 ? void 0 : data.ok) !== true) {
+        throw new ConnectionError(typeof (data === null || data === void 0 ? void 0 : data.error) === 'string' ? data.error : 'connection_unavailable');
+    }
+    return data;
+}
+function parseConnection(raw) {
+    if (!raw || typeof raw !== 'object')
+        return null;
+    const value = raw;
+    if (typeof value.id !== 'string' || typeof value.handle !== 'string' || !Number.isSafeInteger(value.linkedAt))
+        return null;
+    return {
+        id: value.id,
+        handle: value.handle,
+        imageUrl: typeof value.imageUrl === 'string' ? value.imageUrl : null,
+        linkedAt: value.linkedAt,
+    };
+}
+function assertProvider(provider) {
+    if (provider !== 'x')
+        throw new ConnectionError('connection_provider_unsupported');
+}
+/** The signed-in user's linked accounts for this app. */
+async function getConnections() {
+    var _a;
+    const data = await request('/connections', { method: 'GET' });
+    const connections = ((_a = data.connections) !== null && _a !== void 0 ? _a : {});
+    return { x: parseConnection(connections.x) };
+}
+/**
+ * Send the user to the provider's consent screen. They come back to `returnUrl`
+ * (default: this page), where `completeConnection()` finishes the link.
+ */
+async function connect(provider, options = {}) {
+    var _a;
+    assertProvider(provider);
+    if (typeof window === 'undefined')
+        throw new ConnectionError('connection_requires_browser');
+    const returnUrl = new URL((_a = options.returnUrl) !== null && _a !== void 0 ? _a : window.location.href, window.location.href);
+    for (const key of RETURN_PARAMS)
+        returnUrl.searchParams.delete(key);
+    const data = await request(`/connections/${provider}/start`, { method: 'POST', body: { returnUrl: returnUrl.href } });
+    const target = typeof data.authorizationUrl === 'string' ? new URL(data.authorizationUrl) : null;
+    if (!target || target.origin !== 'https://x.com')
+        throw new ConnectionError('connection_unavailable');
+    window.location.assign(target.href);
+}
+/**
+ * Finish a link on the page the provider returned to. Returns null when this page is
+ * not a connection return; throws ConnectionError when the user cancelled or it failed.
+ * Call it once the user is signed in. The return parameters leave the address bar on
+ * success or cancellation; after another failure they stay, so calling again retries.
+ */
+async function completeConnection() {
+    if (typeof window === 'undefined')
+        return null;
+    const url = new URL(window.location.href);
+    const token = url.searchParams.get('x_link');
+    const error = url.searchParams.get('x_link_error');
+    if (token === null && error === null)
+        return null;
+    const clear = () => {
+        for (const key of RETURN_PARAMS)
+            url.searchParams.delete(key);
+        window.history.replaceState(window.history.state, '', url.href);
+    };
+    if (error !== null || !token) {
+        clear();
+        throw new ConnectionError(error || 'failed');
+    }
+    // Keep the return token in the address bar until the platform accepts it, so a
+    // sign-in still loading or a transient failure can retry by calling this again.
+    const data = await request('/connections/x/complete', { method: 'POST', body: { state: token } });
+    clear();
+    return { provider: 'x', connection: parseConnection(data.connection) };
+}
+/** Remove the user's linked account for this app. */
+async function disconnect(provider) {
+    assertProvider(provider);
+    await request(`/connections/${provider}`, { method: 'DELETE' });
+}
+
 // venue-escrow.ts - fund and dispute a venue escrow from inside an OpenApps app (VENUE-GRANT-DESIGN.md).
 //
 // An OpenApps app's escrow lives in its venue (`agentescrows/<rootAppId>/e/<escrowId>`), and this
@@ -12128,5 +12271,5 @@ function init(config = {}) {
     return init$1(resolved);
 }
 
-export { onramp as $, logout as A, getAuthProvider as B, signInAnonymously as C, loginWithPrivy as D, loginWithWallet as E, ensureWalletLoginReady as F, ensureSharedWalletLoginReady as G, preloadWalletLogin as H, loginWithRedirect as I, completeLoginFromRedirect as J, getLoginReturnError as K, loginWithPopup as L, openBoundedWidget as M, ensureSignedIn as N, useAuth as O, useQuery as P, useBuildRun as Q, apps as R, SELECTED_WALLET_UNAVAILABLE_ERR as S, signSolanaMessageViaTurnkey as T, getOrCreateTurnkeyWallet as U, openTurnkeyKeyExport as V, WalletConfigError as W, getTurnkeyWalletSessionState as X, getTurnkeyWalletRecoveryUrl as Y, startTurnkeyEmailLogin as Z, getIdToken as _, signMessageWithTurnkey as a, onrampQuote as a0, onrampStatus as a1, fundVenueEscrow as a2, disputeVenueEscrow as a3, getVenueEscrow as a4, VenueEscrowError as a5, setPlatform as a6, OffchainAuthProvider as a7, PrivyExpoProvider as a8, requestEip6963Providers as a9, connectBroadcast as aa, connectServiceSession as ab, builds as ac, BuildsApiError as ad, mediaAgentTools as ae, NON_TERMINAL_STATES as af, TERMINAL_STATES as ag, RUN_STATES as ah, PARK_REASONS as ai, FAILURE_REASONS as aj, BUILD_REVIEW_CAPABILITY_SCHEMA as ak, BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA as al, BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA as am, signTransactionWithTurnkey as b, signTransactionV1WithTurnkey as c, signAndSubmitTransactionWithTurnkey as d, bs58 as e, defaultInjectedProvider as f, getPlatform as g, hasTurnkeyWallet as h, firstStandardWalletProvider as i, setAuthLoading as j, supportsWalletSignIn as k, bufferExports as l, setStoredAuthMethod as m, normalizeSolanaRpcUrl as n, confirmAndCheckTransaction as o, defaultInjectedEvmProvider as p, init as q, resolveSolanaRpcUrl as r, setCurrentUser as s, transactionHasSignature as t, getCurrentUser as u, onAuthStateChanged as v, onAuthLoadingChanged as w, getAuthLoading as x, waitForAuthReady as y, login as z };
-//# sourceMappingURL=index-BmBLsYn2.mjs.map
+export { onramp as $, logout as A, getAuthProvider as B, signInAnonymously as C, loginWithPrivy as D, loginWithWallet as E, ensureWalletLoginReady as F, ensureSharedWalletLoginReady as G, preloadWalletLogin as H, loginWithRedirect as I, completeLoginFromRedirect as J, getLoginReturnError as K, loginWithPopup as L, openBoundedWidget as M, ensureSignedIn as N, useAuth as O, useQuery as P, useBuildRun as Q, apps as R, SELECTED_WALLET_UNAVAILABLE_ERR as S, signSolanaMessageViaTurnkey as T, getOrCreateTurnkeyWallet as U, openTurnkeyKeyExport as V, WalletConfigError as W, getTurnkeyWalletSessionState as X, getTurnkeyWalletRecoveryUrl as Y, startTurnkeyEmailLogin as Z, getIdToken as _, signMessageWithTurnkey as a, onrampQuote as a0, onrampStatus as a1, connect as a2, completeConnection as a3, getConnections as a4, disconnect as a5, ConnectionError as a6, fundVenueEscrow as a7, disputeVenueEscrow as a8, getVenueEscrow as a9, VenueEscrowError as aa, setPlatform as ab, OffchainAuthProvider as ac, PrivyExpoProvider as ad, requestEip6963Providers as ae, connectBroadcast as af, connectServiceSession as ag, builds as ah, BuildsApiError as ai, mediaAgentTools as aj, NON_TERMINAL_STATES as ak, TERMINAL_STATES as al, RUN_STATES as am, PARK_REASONS as an, FAILURE_REASONS as ao, BUILD_REVIEW_CAPABILITY_SCHEMA as ap, BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA as aq, BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA as ar, signTransactionWithTurnkey as b, signTransactionV1WithTurnkey as c, signAndSubmitTransactionWithTurnkey as d, bs58 as e, defaultInjectedProvider as f, getPlatform as g, hasTurnkeyWallet as h, firstStandardWalletProvider as i, setAuthLoading as j, supportsWalletSignIn as k, bufferExports as l, setStoredAuthMethod as m, normalizeSolanaRpcUrl as n, confirmAndCheckTransaction as o, defaultInjectedEvmProvider as p, init as q, resolveSolanaRpcUrl as r, setCurrentUser as s, transactionHasSignature as t, getCurrentUser as u, onAuthStateChanged as v, onAuthLoadingChanged as w, getAuthLoading as x, waitForAuthReady as y, login as z };
+//# sourceMappingURL=index-q9BHoxbM.mjs.map