@bounded-sh/client 0.0.118-openapps.0 → 0.0.118

package/dist/{injected-wallet-provider-gmGZ254w.mjs → injected-wallet-provider-DuWTw-fM.mjs}

@@ -1,5 +1,5 @@
 import { getActiveSessionManager, genAuthNonce, genSolanaSignInRequest, createSessionWithSignature } from '@bounded-sh/core';
-import { e as bs58, n as normalizeSolanaRpcUrl, S as SELECTED_WALLET_UNAVAILABLE_ERR, f as defaultInjectedProvider, i as firstStandardWalletProvider, j as setAuthLoading, k as supportsWalletSignIn, s as setCurrentUser, l as bufferExports, m as setStoredAuthMethod, g as getPlatform, t as transactionHasSignature, o as confirmAndCheckTransaction, r as resolveSolanaRpcUrl } from './index-q9BHoxbM.mjs';
+import { e as bs58, n as normalizeSolanaRpcUrl, S as SELECTED_WALLET_UNAVAILABLE_ERR, f as defaultInjectedProvider, i as firstStandardWalletProvider, j as setAuthLoading, k as supportsWalletSignIn, s as setCurrentUser, l as bufferExports, m as setStoredAuthMethod, g as getPlatform, t as transactionHasSignature, o as confirmAndCheckTransaction, r as resolveSolanaRpcUrl } from './index-xNGb1ROp.mjs';
 import 'react';
 
 const crypto = typeof globalThis === 'object' && 'crypto' in globalThis ? globalThis.crypto : undefined;
@@ -2764,9 +2764,13 @@ class InjectedWalletProvider {
         // included), so refreshing the blockhash after any signer (sponsor / co-signer)
         // has signed silently invalidates their signature. Only refresh while the
         // transaction is still unsigned; once a real signature is present, submit the
-        // caller's transaction verbatim.
+        // caller's transaction verbatim. The confirmation below is fenced on the
+        // lifetime read here; a pre-signed transaction reads its fence just before
+        // submission instead.
+        let lastValidBlockHeight = null;
         if (!transactionHasSignature(transaction)) {
-            const { blockhash } = await connection.getLatestBlockhash('confirmed');
+            const { blockhash, lastValidBlockHeight: freshLastValid } = await connection.getLatestBlockhash('confirmed');
+            lastValidBlockHeight = freshLastValid;
             const isLegacy = 'recentBlockhash' in transaction &&
                 !('message' in transaction && 'staticAccountKeys' in transaction.message);
             if (isLegacy) {
@@ -2810,8 +2814,13 @@ class InjectedWalletProvider {
             // the transaction is on the network.
             await this.assertSignedByAuthenticatedAccount(signed, message, 'submitted');
             const raw = signed.serialize();
+            // A pre-signed transaction carries a lifetime its signers fenced on and this
+            // code never saw; a height read now is a superset of it, never a shorter
+            // wait, and reading it only after the wallet signed keeps a sign-only wallet's
+            // first network call on the submit itself.
+            const fence = lastValidBlockHeight !== null && lastValidBlockHeight !== void 0 ? lastValidBlockHeight : (await connection.getLatestBlockhash('confirmed')).lastValidBlockHeight;
             const signature = await connection.sendRawTransaction(raw);
-            await confirmAndCheckTransaction(connection, signature);
+            await confirmAndCheckTransaction(connection, signature, fence);
             return signature;
         }
         // Neither capability: this wallet cannot put a transaction on the chain
@@ -2848,4 +2857,4 @@ class InjectedWalletProvider {
 }
 
 export { InjectedWalletProvider, WALLET_SIGN_IN_UNSUPPORTED_ERR, defaultInjectedProvider };
-//# sourceMappingURL=injected-wallet-provider-gmGZ254w.mjs.map
+//# sourceMappingURL=injected-wallet-provider-DuWTw-fM.mjs.map