@bounded-sh/client 0.0.117 → 0.0.118

package/dist/index.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-DrVV40Si.js');
+var index = require('./index-eMCWYiRe.js');
 var core = require('@bounded-sh/core');
 require('react');
 

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { ar as BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA, aq as BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA, ap as BUILD_REVIEW_CAPABILITY_SCHEMA, ai as BuildsApiError, a6 as ConnectionError, ao as FAILURE_REASONS, ak as NON_TERMINAL_STATES, ac as OffchainAuthProvider, an as PARK_REASONS, ad as PrivyExpoProvider, am as RUN_STATES, al as TERMINAL_STATES, aa as VenueEscrowError, W as WalletConfigError, R as apps, ah as builds, a3 as completeConnection, J as completeLoginFromRedirect, a2 as connect, af as connectBroadcast, ag as connectServiceSession, p as defaultInjectedEvmProvider, f as defaultInjectedProvider, a5 as disconnect, a8 as disputeVenueEscrow, G as ensureSharedWalletLoginReady, N as ensureSignedIn, F as ensureWalletLoginReady, a7 as fundVenueEscrow, x as getAuthLoading, B as getAuthProvider, a4 as getConnections, u as getCurrentUser, _ as getIdToken, K as getLoginReturnError, U as getOrCreateTurnkeyWallet, g as getPlatform, Y as getTurnkeyWalletRecoveryUrl, X as getTurnkeyWalletSessionState, a9 as getVenueEscrow, q as init, z as login, L as loginWithPopup, D as loginWithPrivy, I as loginWithRedirect, E as loginWithWallet, A as logout, aj as mediaAgentTools, w as onAuthLoadingChanged, v as onAuthStateChanged, $ as onramp, a0 as onrampQuote, a1 as onrampStatus, M as openBoundedWidget, V as openTurnkeyKeyExport, H as preloadWalletLogin, ae as requestEip6963Providers, ab as setPlatform, C as signInAnonymously, T as signSolanaMessageViaTurnkey, Z as startTurnkeyEmailLogin, k as supportsWalletSignIn, O as useAuth, Q as useBuildRun, P as useQuery, y as waitForAuthReady } from './index-Sx-Caknc.mjs';
+export { ar as BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA, aq as BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA, ap as BUILD_REVIEW_CAPABILITY_SCHEMA, ai as BuildsApiError, a6 as ConnectionError, ao as FAILURE_REASONS, ak as NON_TERMINAL_STATES, ac as OffchainAuthProvider, an as PARK_REASONS, ad as PrivyExpoProvider, am as RUN_STATES, al as TERMINAL_STATES, aa as VenueEscrowError, W as WalletConfigError, R as apps, ah as builds, a3 as completeConnection, J as completeLoginFromRedirect, a2 as connect, af as connectBroadcast, ag as connectServiceSession, p as defaultInjectedEvmProvider, f as defaultInjectedProvider, a5 as disconnect, a8 as disputeVenueEscrow, G as ensureSharedWalletLoginReady, N as ensureSignedIn, F as ensureWalletLoginReady, a7 as fundVenueEscrow, x as getAuthLoading, B as getAuthProvider, a4 as getConnections, u as getCurrentUser, _ as getIdToken, K as getLoginReturnError, U as getOrCreateTurnkeyWallet, g as getPlatform, Y as getTurnkeyWalletRecoveryUrl, X as getTurnkeyWalletSessionState, a9 as getVenueEscrow, q as init, z as login, L as loginWithPopup, D as loginWithPrivy, I as loginWithRedirect, E as loginWithWallet, A as logout, aj as mediaAgentTools, w as onAuthLoadingChanged, v as onAuthStateChanged, $ as onramp, a0 as onrampQuote, a1 as onrampStatus, M as openBoundedWidget, V as openTurnkeyKeyExport, H as preloadWalletLogin, ae as requestEip6963Providers, ab as setPlatform, C as signInAnonymously, T as signSolanaMessageViaTurnkey, Z as startTurnkeyEmailLogin, k as supportsWalletSignIn, O as useAuth, Q as useBuildRun, P as useQuery, y as waitForAuthReady } from './index-xNGb1ROp.mjs';
 export * from '@bounded-sh/core';
 export { AppTokenExchangeError, BoundedDeclineError, DECLINE_EVENT_NAME, RATE_LIMIT_EVENT_NAME, ScopedClientReadOnlyError, aggregate, clearAppTokenCache, count, createAppTokenAuthHeaders, createClient, deriveDecline, dispatchDeclineEvent, dispatchRateLimitEvent, docId, exchangeAppToken, get, getConfig, getFiles, getMany, queryAggregate, reconcileSetResult, runExpression, runExpressionMany, runQuery, runQueryMany, search, set, setFile, setMany, signAndSubmitTransaction, signMessage, signTransaction, subscribe, waitForSetResult } from '@bounded-sh/core';
 import 'react';

package/dist/{index.native-CMNMw3Pe.js → index.native-ByI3rRu4.js}

@@ -4916,10 +4916,9 @@ async function signAndSubmitTransactionWithTurnkey(transaction, feePayer) {
     // has signed silently invalidates their signature - signTransactionWithTurnkey only ADDS the
     // Turnkey signature, it never re-signs the others. So only refresh the blockhash while the
     // transaction is still unsigned; once a real signature is present, preserve the caller's message
-    // verbatim and confirm against the blockhash it already carries.
-    const hasSignature = transactionHasSignature$1(transaction);
-    let confirmBlockhash = blockhash;
-    if (!hasSignature) {
+    // verbatim. The confirmation is fenced on the lifetime read above either way: for a pre-signed
+    // transaction that is a superset of the one its signers fenced on, never a shorter wait.
+    if (!transactionHasSignature$1(transaction)) {
         if (isLegacy) {
             const legacy = transaction;
             legacy.recentBlockhash = blockhash;
@@ -4935,19 +4934,17 @@ async function signAndSubmitTransactionWithTurnkey(transaction, feePayer) {
             transaction.message.recentBlockhash = blockhash;
         }
     }
-    else {
-        confirmBlockhash = (isLegacy
-            ? transaction.recentBlockhash
-            : transaction.message.recentBlockhash) || blockhash;
-    }
     const signed = await signTransactionWithTurnkey(transaction);
     const signature = await connection.sendRawTransaction(signed.serialize(), {
         skipPreflight: false,
         maxRetries: 3,
     });
-    const confirmation = await connection.confirmTransaction({ signature, blockhash: confirmBlockhash, lastValidBlockHeight }, 'confirmed');
-    if (confirmation.value.err) {
-        throw new Error(`Turnkey transaction failed: ${JSON.stringify(confirmation.value.err)}`);
+    const confirmation = await core.confirmSignature(connection, { signature, lastValidBlockHeight });
+    if (!confirmation.landed) {
+        throw new Error(`Turnkey transaction ${signature} was not confirmed: ${confirmation.reason}. Check its status before sending it again.`);
+    }
+    if (confirmation.status.err) {
+        throw new Error(`Turnkey transaction failed: ${JSON.stringify(confirmation.status.err)}`);
     }
     return signature;
 }
@@ -6089,7 +6086,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // manager as legacy email sessions. Human login should be started
             // with loginWithRedirect(); this provider is kept as the restore and
             // logout surface for those sessions.
-            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./email-auth-provider-3tuw_aDK.js'); })).EmailAuthProvider();
+            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./email-auth-provider-C-qQ46kD.js'); })).EmailAuthProvider();
             break;
         case "phantom": {
             // First-class Solana WALLET LOGIN (the poof/TaroBase-style "connect
@@ -6131,7 +6128,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // (bounded-login-widget.ts), so registration never counts as
             // evidence the user has a wallet.
             await ensureSolanaMobileWalletRegistered(config, configuredNetwork);
-            const { InjectedWalletProvider } = await Promise.resolve().then(function () { return require('./injected-wallet-provider-BqYJQDGu.js'); });
+            const { InjectedWalletProvider } = await Promise.resolve().then(function () { return require('./injected-wallet-provider-zXw__lyf.js'); });
             currentAuthProvider = new InjectedWalletProvider(resolveInjectedWalletConfig(config), rpcUrl, configuredNetwork);
             break;
         }
@@ -6144,7 +6141,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // Selecting authMethod:'evm-wallet' IS the opt-in — pass evmWalletConfig
             // to point at a specific wallet or set chainId/domain.
             const evmWalletConfig = ((_a = config.evmWalletConfig) !== null && _a !== void 0 ? _a : {});
-            const { InjectedEvmWalletProvider } = await Promise.resolve().then(function () { return require('./injected-evm-wallet-provider-CUNTCT-a.js'); });
+            const { InjectedEvmWalletProvider } = await Promise.resolve().then(function () { return require('./injected-evm-wallet-provider-BMjQaUiB.js'); });
             currentAuthProvider = new InjectedEvmWalletProvider(evmWalletConfig);
             break;
         }
@@ -6169,7 +6166,7 @@ async function getAuthProvider(config, fromStorage = false) {
             break;
         case "guest":
             // Anonymous auth: a device-local ed25519 keypair signs the challenge.
-            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-_jdqZKUo.js'); })).GuestAuthProvider();
+            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-g5-T58yA.js'); })).GuestAuthProvider();
             break;
     }
     if (!currentAuthProvider) {
@@ -6231,7 +6228,7 @@ async function signInAnonymously() {
     // Lazy-load the guest provider so its ed25519/web3 dependencies stay out of
     // the main bundle for data-only apps. Specifier is a static string literal
     // so bundle-splitting can see it.
-    const provider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-_jdqZKUo.js'); })).GuestAuthProvider();
+    const provider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-g5-T58yA.js'); })).GuestAuthProvider();
     setAuthLoading(true); // reflect "signing in…" while the guest keypair session is minted
     // adoptSessionProvider awaits only getConfig() (already resolved here) and then
     // runs every write - provider/method/config/marker/user - in one synchronous
@@ -6402,7 +6399,7 @@ function ensureSharedWalletLoginReady() {
     if (!sharedWalletReady) {
         sharedWalletReady = (async () => {
             await core.getConfig();
-            await Promise.resolve().then(function () { return require('./injected-wallet-provider-BqYJQDGu.js'); });
+            await Promise.resolve().then(function () { return require('./injected-wallet-provider-zXw__lyf.js'); });
         })().catch((error) => {
             sharedWalletReady = null;
             throw error;
@@ -8582,35 +8579,29 @@ async function getParsedTransactionCompat(connection, signature) {
     }
 }
 /**
- * Polls getSignatureStatuses until the transaction is confirmed, then checks for errors.
- * Throws if the transaction failed on-chain. Returns parsed transaction info on success.
+ * Waits for a broadcast signature by HTTPS status polling, fenced on the blockhash
+ * lifetime it was signed against (core's `confirmSignature`), then checks for an
+ * on-chain error. Throws if the transaction failed on-chain or was not seen before
+ * the fence closed. Returns parsed transaction info on success.
  */
-async function confirmAndCheckTransaction(connection, signature) {
+async function confirmAndCheckTransaction(connection, signature, lastValidBlockHeight) {
     var _a;
-    const maxAttempts = 15;
-    for (let i = 0; i < maxAttempts; i++) {
-        const { value } = await connection.getSignatureStatuses([signature]);
-        const status = value[0];
-        if (status) {
-            if (status.err) {
-                let logMessages;
-                try {
-                    const txInfo = await getParsedTransactionCompat(connection, signature);
-                    logMessages = (_a = txInfo === null || txInfo === void 0 ? void 0 : txInfo.meta) === null || _a === void 0 ? void 0 : _a.logMessages;
-                }
-                catch (_b) {
-                    // Log retrieval is diagnostic only; the on-chain error is the verdict.
-                }
-                const errorMessage = extractTransactionError(status.err, logMessages);
-                throw new Error(`Transaction failed: ${errorMessage}`);
-            }
-            if (status.confirmationStatus === 'confirmed' || status.confirmationStatus === 'finalized') {
-                return await getParsedTransactionCompat(connection, signature);
-            }
+    const confirmation = await core.confirmSignature(connection, { signature, lastValidBlockHeight });
+    if (!confirmation.landed) {
+        throw new Error(`Transaction ${signature} was not confirmed: ${confirmation.reason}. Check its status before sending it again.`);
+    }
+    if (confirmation.status.err) {
+        let logMessages;
+        try {
+            const txInfo = await getParsedTransactionCompat(connection, signature);
+            logMessages = (_a = txInfo === null || txInfo === void 0 ? void 0 : txInfo.meta) === null || _a === void 0 ? void 0 : _a.logMessages;
+        }
+        catch (_b) {
+            // Log retrieval is diagnostic only; the on-chain error is the verdict.
         }
-        await new Promise(resolve => setTimeout(resolve, 1000));
+        throw new Error(`Transaction failed: ${extractTransactionError(confirmation.status.err, logMessages)}`);
     }
-    throw new Error('Transaction confirmation timeout');
+    return getParsedTransactionCompat(connection, signature);
 }
 
 /**
@@ -8780,24 +8771,30 @@ class PrivyExpoProvider {
         // included), so refreshing the blockhash after any signer (sponsor / co-signer)
         // has signed silently invalidates their signature. Only refresh while the
         // transaction is still unsigned; once a real signature is present, submit the
-        // caller's transaction verbatim.
+        // caller's transaction verbatim. Either way the confirmation is fenced on a
+        // lifetime read now: for a pre-signed transaction that is a superset of the
+        // one its signers fenced on, never a shorter wait.
+        let lastValidBlockHeight;
         if (!transactionHasSignature(transaction)) {
+            const { blockhash, lastValidBlockHeight: freshLastValid } = await connection.getLatestBlockhash('confirmed');
+            lastValidBlockHeight = freshLastValid;
             const isLegacyTx = 'recentBlockhash' in transaction &&
                 !('message' in transaction && 'staticAccountKeys' in transaction.message);
             if (isLegacyTx) {
                 const legacyTx = transaction;
-                const { blockhash, lastValidBlockHeight } = await connection.getLatestBlockhash('confirmed');
                 legacyTx.recentBlockhash = blockhash;
                 legacyTx.lastValidBlockHeight = lastValidBlockHeight;
                 legacyTx.feePayer = feePayer || new PublicKey(wallet.address);
             }
             else {
                 const versionedTx = transaction;
-                const { blockhash } = await connection.getLatestBlockhash('confirmed');
                 versionedTx.message.recentBlockhash = blockhash;
             }
         }
-        const { signature } = await this.signAndSubmitInternal(transaction, wallet, connection);
+        else {
+            ({ lastValidBlockHeight } = await connection.getLatestBlockhash('confirmed'));
+        }
+        const { signature } = await this.signAndSubmitInternal(transaction, wallet, connection, lastValidBlockHeight);
         return signature;
     }
     async restoreSession(beforeCommit) {
@@ -8868,11 +8865,11 @@ class PrivyExpoProvider {
                 `Sign in again before ${action}.`);
         }
     }
-    async signAndSubmitInternal(transaction, wallet, connection) {
+    async signAndSubmitInternal(transaction, wallet, connection, lastValidBlockHeight) {
         // Use Privy's combined sign+send
         const result = await wallet.signAndSendTransaction(transaction, connection);
         const signature = result.signature;
-        const txInfo = await confirmAndCheckTransaction(connection, signature);
+        const txInfo = await confirmAndCheckTransaction(connection, signature, lastValidBlockHeight);
         return { signature, txInfo };
     }
     // The constructor rpcUrl wins, then init()'s rpcUrl, then the platform RPC
@@ -8966,4 +8963,4 @@ exports.useBuildRun = useBuildRun;
 exports.useQuery = useQuery;
 exports.waitForAuthReady = waitForAuthReady;
 exports.walletStandardFeatureName = walletStandardFeatureName;
-//# sourceMappingURL=index.native-CMNMw3Pe.js.map
+//# sourceMappingURL=index.native-ByI3rRu4.js.map