@bounded-sh/client 0.0.118-openapps.0 → 0.0.118

package/dist/{index.native-DfDVa7MG.mjs → index.native-YmmnwqEw.mjs}

@@ -1,4 +1,4 @@
-import { getConfig, getActiveSessionManager, WebSessionManager, ReactNativeSessionManager, revokeSession, reconnectWithNewAuth, init as init$1, deriveUserIdentityFromIdToken, onSessionCleared, onSessionChange, subscribe, getFreshAuthToken, getSessionGeneration, getIdToken as getIdToken$1, genAuthNonce, genSolanaMessage, createSessionWithSignature } from '@bounded-sh/core';
+import { getConfig, confirmSignature, getActiveSessionManager, WebSessionManager, ReactNativeSessionManager, revokeSession, reconnectWithNewAuth, init as init$1, deriveUserIdentityFromIdToken, onSessionCleared, onSessionChange, subscribe, getFreshAuthToken, getSessionGeneration, getIdToken as getIdToken$1, genAuthNonce, genSolanaMessage, createSessionWithSignature } from '@bounded-sh/core';
 import * as React from 'react';
 
 function walletContextFromClaims(claims, baseUrl, expectedAppId, tenantOrigin) {
@@ -4895,10 +4895,9 @@ async function signAndSubmitTransactionWithTurnkey(transaction, feePayer) {
     // has signed silently invalidates their signature - signTransactionWithTurnkey only ADDS the
     // Turnkey signature, it never re-signs the others. So only refresh the blockhash while the
     // transaction is still unsigned; once a real signature is present, preserve the caller's message
-    // verbatim and confirm against the blockhash it already carries.
-    const hasSignature = transactionHasSignature$1(transaction);
-    let confirmBlockhash = blockhash;
-    if (!hasSignature) {
+    // verbatim. The confirmation is fenced on the lifetime read above either way: for a pre-signed
+    // transaction that is a superset of the one its signers fenced on, never a shorter wait.
+    if (!transactionHasSignature$1(transaction)) {
         if (isLegacy) {
             const legacy = transaction;
             legacy.recentBlockhash = blockhash;
@@ -4914,19 +4913,17 @@ async function signAndSubmitTransactionWithTurnkey(transaction, feePayer) {
             transaction.message.recentBlockhash = blockhash;
         }
     }
-    else {
-        confirmBlockhash = (isLegacy
-            ? transaction.recentBlockhash
-            : transaction.message.recentBlockhash) || blockhash;
-    }
     const signed = await signTransactionWithTurnkey(transaction);
     const signature = await connection.sendRawTransaction(signed.serialize(), {
         skipPreflight: false,
         maxRetries: 3,
     });
-    const confirmation = await connection.confirmTransaction({ signature, blockhash: confirmBlockhash, lastValidBlockHeight }, 'confirmed');
-    if (confirmation.value.err) {
-        throw new Error(`Turnkey transaction failed: ${JSON.stringify(confirmation.value.err)}`);
+    const confirmation = await confirmSignature(connection, { signature, lastValidBlockHeight });
+    if (!confirmation.landed) {
+        throw new Error(`Turnkey transaction ${signature} was not confirmed: ${confirmation.reason}. Check its status before sending it again.`);
+    }
+    if (confirmation.status.err) {
+        throw new Error(`Turnkey transaction failed: ${JSON.stringify(confirmation.status.err)}`);
     }
     return signature;
 }
@@ -6068,7 +6065,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // manager as legacy email sessions. Human login should be started
             // with loginWithRedirect(); this provider is kept as the restore and
             // logout surface for those sessions.
-            currentAuthProvider = new (await import('./email-auth-provider-C5bYKzpN.mjs')).EmailAuthProvider();
+            currentAuthProvider = new (await import('./email-auth-provider-DFHalX9c.mjs')).EmailAuthProvider();
             break;
         case "phantom": {
             // First-class Solana WALLET LOGIN (the poof/TaroBase-style "connect
@@ -6110,7 +6107,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // (bounded-login-widget.ts), so registration never counts as
             // evidence the user has a wallet.
             await ensureSolanaMobileWalletRegistered(config, configuredNetwork);
-            const { InjectedWalletProvider } = await import('./injected-wallet-provider-BoRoxrEl.mjs');
+            const { InjectedWalletProvider } = await import('./injected-wallet-provider-DSOjJP3u.mjs');
             currentAuthProvider = new InjectedWalletProvider(resolveInjectedWalletConfig(config), rpcUrl, configuredNetwork);
             break;
         }
@@ -6123,7 +6120,7 @@ async function getAuthProvider(config, fromStorage = false) {
             // Selecting authMethod:'evm-wallet' IS the opt-in — pass evmWalletConfig
             // to point at a specific wallet or set chainId/domain.
             const evmWalletConfig = ((_a = config.evmWalletConfig) !== null && _a !== void 0 ? _a : {});
-            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-E7eCpvLr.mjs');
+            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-BoLGCVqD.mjs');
             currentAuthProvider = new InjectedEvmWalletProvider(evmWalletConfig);
             break;
         }
@@ -6148,7 +6145,7 @@ async function getAuthProvider(config, fromStorage = false) {
             break;
         case "guest":
             // Anonymous auth: a device-local ed25519 keypair signs the challenge.
-            currentAuthProvider = new (await import('./guest-auth-provider-CsM_SuGH.mjs')).GuestAuthProvider();
+            currentAuthProvider = new (await import('./guest-auth-provider-BRq3JB0_.mjs')).GuestAuthProvider();
             break;
     }
     if (!currentAuthProvider) {
@@ -6210,7 +6207,7 @@ async function signInAnonymously() {
     // Lazy-load the guest provider so its ed25519/web3 dependencies stay out of
     // the main bundle for data-only apps. Specifier is a static string literal
     // so bundle-splitting can see it.
-    const provider = new (await import('./guest-auth-provider-CsM_SuGH.mjs')).GuestAuthProvider();
+    const provider = new (await import('./guest-auth-provider-BRq3JB0_.mjs')).GuestAuthProvider();
     setAuthLoading(true); // reflect "signing in…" while the guest keypair session is minted
     // adoptSessionProvider awaits only getConfig() (already resolved here) and then
     // runs every write - provider/method/config/marker/user - in one synchronous
@@ -6381,7 +6378,7 @@ function ensureSharedWalletLoginReady() {
     if (!sharedWalletReady) {
         sharedWalletReady = (async () => {
             await getConfig();
-            await import('./injected-wallet-provider-BoRoxrEl.mjs');
+            await import('./injected-wallet-provider-DSOjJP3u.mjs');
         })().catch((error) => {
             sharedWalletReady = null;
             throw error;
@@ -8561,35 +8558,29 @@ async function getParsedTransactionCompat(connection, signature) {
     }
 }
 /**
- * Polls getSignatureStatuses until the transaction is confirmed, then checks for errors.
- * Throws if the transaction failed on-chain. Returns parsed transaction info on success.
+ * Waits for a broadcast signature by HTTPS status polling, fenced on the blockhash
+ * lifetime it was signed against (core's `confirmSignature`), then checks for an
+ * on-chain error. Throws if the transaction failed on-chain or was not seen before
+ * the fence closed. Returns parsed transaction info on success.
  */
-async function confirmAndCheckTransaction(connection, signature) {
+async function confirmAndCheckTransaction(connection, signature, lastValidBlockHeight) {
     var _a;
-    const maxAttempts = 15;
-    for (let i = 0; i < maxAttempts; i++) {
-        const { value } = await connection.getSignatureStatuses([signature]);
-        const status = value[0];
-        if (status) {
-            if (status.err) {
-                let logMessages;
-                try {
-                    const txInfo = await getParsedTransactionCompat(connection, signature);
-                    logMessages = (_a = txInfo === null || txInfo === void 0 ? void 0 : txInfo.meta) === null || _a === void 0 ? void 0 : _a.logMessages;
-                }
-                catch (_b) {
-                    // Log retrieval is diagnostic only; the on-chain error is the verdict.
-                }
-                const errorMessage = extractTransactionError(status.err, logMessages);
-                throw new Error(`Transaction failed: ${errorMessage}`);
-            }
-            if (status.confirmationStatus === 'confirmed' || status.confirmationStatus === 'finalized') {
-                return await getParsedTransactionCompat(connection, signature);
-            }
+    const confirmation = await confirmSignature(connection, { signature, lastValidBlockHeight });
+    if (!confirmation.landed) {
+        throw new Error(`Transaction ${signature} was not confirmed: ${confirmation.reason}. Check its status before sending it again.`);
+    }
+    if (confirmation.status.err) {
+        let logMessages;
+        try {
+            const txInfo = await getParsedTransactionCompat(connection, signature);
+            logMessages = (_a = txInfo === null || txInfo === void 0 ? void 0 : txInfo.meta) === null || _a === void 0 ? void 0 : _a.logMessages;
+        }
+        catch (_b) {
+            // Log retrieval is diagnostic only; the on-chain error is the verdict.
         }
-        await new Promise(resolve => setTimeout(resolve, 1000));
+        throw new Error(`Transaction failed: ${extractTransactionError(confirmation.status.err, logMessages)}`);
     }
-    throw new Error('Transaction confirmation timeout');
+    return getParsedTransactionCompat(connection, signature);
 }
 
 /**
@@ -8759,24 +8750,30 @@ class PrivyExpoProvider {
         // included), so refreshing the blockhash after any signer (sponsor / co-signer)
         // has signed silently invalidates their signature. Only refresh while the
         // transaction is still unsigned; once a real signature is present, submit the
-        // caller's transaction verbatim.
+        // caller's transaction verbatim. Either way the confirmation is fenced on a
+        // lifetime read now: for a pre-signed transaction that is a superset of the
+        // one its signers fenced on, never a shorter wait.
+        let lastValidBlockHeight;
         if (!transactionHasSignature(transaction)) {
+            const { blockhash, lastValidBlockHeight: freshLastValid } = await connection.getLatestBlockhash('confirmed');
+            lastValidBlockHeight = freshLastValid;
             const isLegacyTx = 'recentBlockhash' in transaction &&
                 !('message' in transaction && 'staticAccountKeys' in transaction.message);
             if (isLegacyTx) {
                 const legacyTx = transaction;
-                const { blockhash, lastValidBlockHeight } = await connection.getLatestBlockhash('confirmed');
                 legacyTx.recentBlockhash = blockhash;
                 legacyTx.lastValidBlockHeight = lastValidBlockHeight;
                 legacyTx.feePayer = feePayer || new PublicKey(wallet.address);
             }
             else {
                 const versionedTx = transaction;
-                const { blockhash } = await connection.getLatestBlockhash('confirmed');
                 versionedTx.message.recentBlockhash = blockhash;
             }
         }
-        const { signature } = await this.signAndSubmitInternal(transaction, wallet, connection);
+        else {
+            ({ lastValidBlockHeight } = await connection.getLatestBlockhash('confirmed'));
+        }
+        const { signature } = await this.signAndSubmitInternal(transaction, wallet, connection, lastValidBlockHeight);
         return signature;
     }
     async restoreSession(beforeCommit) {
@@ -8847,11 +8844,11 @@ class PrivyExpoProvider {
                 `Sign in again before ${action}.`);
         }
     }
-    async signAndSubmitInternal(transaction, wallet, connection) {
+    async signAndSubmitInternal(transaction, wallet, connection, lastValidBlockHeight) {
         // Use Privy's combined sign+send
         const result = await wallet.signAndSendTransaction(transaction, connection);
         const signature = result.signature;
-        const txInfo = await confirmAndCheckTransaction(connection, signature);
+        const txInfo = await confirmAndCheckTransaction(connection, signature, lastValidBlockHeight);
         return { signature, txInfo };
     }
     // The constructor rpcUrl wins, then init()'s rpcUrl, then the platform RPC
@@ -8888,4 +8885,4 @@ class PrivyExpoProvider {
 }
 
 export { PARK_REASONS as $, waitForAuthReady as A, login as B, logout as C, getAuthProvider as D, signInAnonymously as E, loginWithPrivy as F, loginWithRedirect as G, completeLoginFromRedirect as H, getLoginReturnError as I, loginWithPopup as J, useAuth as K, useQuery as L, useBuildRun as M, apps as N, getIdToken as O, onramp as P, onrampQuote as Q, onrampStatus as R, setPlatform as S, OffchainAuthProvider as T, PrivyExpoProvider as U, builds as V, BuildsApiError as W, mediaAgentTools as X, NON_TERMINAL_STATES as Y, TERMINAL_STATES as Z, RUN_STATES as _, signMessageWithTurnkey as a, FAILURE_REASONS as a0, BUILD_REVIEW_CAPABILITY_SCHEMA as a1, BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA as a2, BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA as a3, signTransactionWithTurnkey as b, signTransactionV1WithTurnkey as c, signAndSubmitTransactionWithTurnkey as d, bs58 as e, getWallets as f, getPlatform as g, hasTurnkeyWallet as h, solanaMobileWalletLeavesPage as i, solanaMobileWalletAnswersSignInFromCache as j, isSolanaMobileWallet as k, setAuthLoading as l, bufferExports as m, normalizeSolanaRpcUrl as n, setStoredAuthMethod as o, confirmAndCheckTransaction as p, resolveSolanaRpcUrl as q, resolveSolanaWalletStandardChain as r, setCurrentUser as s, transactionHasSignature as t, init as u, getCurrentUser as v, walletStandardFeatureName as w, onAuthStateChanged as x, onAuthLoadingChanged as y, getAuthLoading as z };
-//# sourceMappingURL=index.native-DfDVa7MG.mjs.map
+//# sourceMappingURL=index.native-YmmnwqEw.mjs.map