@bounded-sh/client 0.0.17 → 0.0.18

package/dist/{index.native-DlMO7aHv.mjs → index.native-DahSrHrM.mjs}

@@ -6670,6 +6670,50 @@ const MODAL_CSS = `
 #bounded-auth-modal .hidden{display:none;}
 @media (max-width:480px){#bounded-auth-modal .ba-card{max-width:none;border-radius:16px;}}`;
 
+const SURFNET_RPC_URL = "https://surfpool.fly.dev";
+const SUPPORTED_SOLANA_NETWORKS = new Set([
+    "solana_devnet",
+    "solana_mainnet",
+    "surfnet",
+]);
+function normalizeSolanaRpcUrl(rpcUrl) {
+    if (typeof rpcUrl !== "string")
+        return null;
+    const trimmed = rpcUrl.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
+function isSupportedSolanaRpcNetwork(network) {
+    return typeof network === "string" && SUPPORTED_SOLANA_NETWORKS.has(network);
+}
+function resolveSolanaWalletStandardChain(network, context) {
+    switch (network) {
+        case "solana_devnet":
+            return "solana:devnet";
+        case "solana_mainnet":
+            return "solana:mainnet";
+        case "surfnet":
+            return "solana:localnet";
+        case undefined:
+        case null:
+        case "":
+            throw new Error(`${context} requires an explicit Solana network. ` +
+                `Provide one of: solana_devnet, solana_mainnet, surfnet.`);
+        default:
+            throw new Error(`${context} does not support Solana network "${network}". ` +
+                `Expected one of: solana_devnet, solana_mainnet, surfnet.`);
+    }
+}
+function resolveSolanaRpcUrl(explicitRpcUrl, network, context) {
+    if (network != null && network !== "" && !isSupportedSolanaRpcNetwork(network)) {
+        throw new Error(`${context} does not support Solana network "${network}". ` +
+            `Expected one of: solana_devnet, solana_mainnet, surfnet.`);
+    }
+    const rpcUrl = normalizeSolanaRpcUrl(explicitRpcUrl);
+    if (rpcUrl)
+        return rpcUrl;
+    throw new Error(`${context} requires an explicit Solana RPC URL. Pass config.rpcUrl before signing or submitting onchain transactions.`);
+}
+
 const PKCE_STORE_KEY = 'bounded.oidc.pkce';
 // Active session store (Web on web, RN on React Native) — selected by config,
 // not by `typeof window` (truthy on RN). OIDC redirect/popup is web-only, but the
@@ -6976,7 +7020,7 @@ async function exchangeCode(code, verifier, redirectUri) {
 let currentAuthProvider = null;
 let currentAuthMethod = null;
 let initConfig = null;
-// --- localStorage helpers: track which auth method the user last logged in with ---
+// --- localStorage helpers: track which auth method created the active session ---
 const STORED_AUTH_METHOD_KEY = 'bounded_last_auth_method';
 function getStoredAuthMethod() {
     try {
@@ -7000,7 +7044,7 @@ function setStoredAuthMethod(method) {
     }
 }
 /**
- * Clears the session if it was created before auth method tracking (legacy session).
+ * Clears the session if it was created by a different auth method.
  * Returns true if the session was cleared, false if the session is compatible.
  *
  * Dispatches to the correct session manager based on the current auth method
@@ -7008,47 +7052,96 @@ function setStoredAuthMethod(method) {
  * are properly cleared.
  */
 function clearIncompatibleSession() {
-    if (getStoredAuthMethod() !== null) {
-        return false; // Auth method is tracked — session is compatible
+    if (getStoredAuthMethod() === currentAuthMethod) {
+        return false;
     }
-    // Legacy session (no stored auth method) — clear it so the user re-authenticates
-    // with the correct provider.
-    // Clear both managers — on web the RN manager is a no-op (not configured),
-    // on RN the web manager is a no-op (no localStorage).
+    // Clear both managers: on web the RN manager is a no-op (not configured),
+    // and on RN the web manager is a no-op (no localStorage).
     WebSessionManager.clearSession();
     try {
         ReactNativeSessionManager.clearSession();
     }
     catch ( /* not configured on web */_a) { /* not configured on web */ }
+    setStoredAuthMethod(null);
     return true;
 }
 // Lazy loaders for web-only providers.
 // Using dynamic import() ensures Metro (RN) never resolves these modules.
 async function loadPhantomWalletProvider() {
-    const mod = await import('./phantom-wallet-provider-DWG1LVJf.mjs');
+    const mod = await import('./phantom-wallet-provider-l-CNnHPs.mjs');
     return { PhantomWalletProvider: mod.PhantomWalletProvider };
 }
 // Web Privy provider (depends on react-dom + @privy-io/react-auth). Lazy so Metro
 // never bundles it into the RN build — RN uses the @privy-io/expo provider instead.
 async function loadPrivyWalletProvider() {
-    const mod = await import('./privy-wallet-provider-CyNLekvY.mjs');
+    const mod = await import('./privy-wallet-provider-BWM8TNO9.mjs');
     return mod.PrivyWalletProvider;
 }
 async function loadSolanaMobileWalletProvider() {
-    const mod = await import('./solana-mobile-wallet-provider-CKOSbLRd.mjs');
+    const mod = await import('./solana-mobile-wallet-provider-C78VWmM-.mjs');
     return mod.SolanaMobileWalletProvider;
 }
+function requireWebPrivyConfig(config) {
+    if (!config.privyConfig || typeof config.privyConfig.appId !== 'string' || config.privyConfig.appId.trim() === '') {
+        throw new Error('Privy auth requires config.privyConfig.appId; no default Privy app is used.');
+    }
+    if (!config.privyConfig.config || typeof config.privyConfig.config !== 'object') {
+        throw new Error('Privy auth requires config.privyConfig.config for the app-scoped Privy provider.');
+    }
+    return config.privyConfig;
+}
+function getConfiguredSolanaNetwork(config) {
+    if (typeof config.chain !== 'string')
+        return null;
+    const chain = config.chain.trim();
+    if (chain === '' || chain === 'offchain')
+        return null;
+    return chain;
+}
+function mobileWalletClusterFromNetwork(network) {
+    switch (network) {
+        case "solana_devnet":
+            return "devnet";
+        case "solana_mainnet":
+            return "mainnet-beta";
+        case "surfnet":
+            return "localnet";
+        case null:
+            return null;
+        default:
+            resolveSolanaWalletStandardChain(network, "Mobile wallet auth");
+            return null;
+    }
+}
+function requireMobileWalletConfig(config) {
+    var _a, _b, _c;
+    const configuredNetwork = getConfiguredSolanaNetwork(config);
+    const cluster = (_b = (_a = config.mobileWalletConfig) === null || _a === void 0 ? void 0 : _a.cluster) !== null && _b !== void 0 ? _b : mobileWalletClusterFromNetwork(configuredNetwork);
+    if (!cluster) {
+        throw new Error("Mobile wallet auth requires an explicit Solana network. " +
+            "Pass config.chain as solana_devnet, solana_mainnet, or surfnet, " +
+            "or pass mobileWalletConfig.cluster.");
+    }
+    return Object.assign(Object.assign({}, ((_c = config.mobileWalletConfig) !== null && _c !== void 0 ? _c : {})), { cluster });
+}
 async function hotSwapToMWAProvider(config) {
-    var _a, _b;
-    const rpcUrl = (_a = config.rpcUrl) !== null && _a !== void 0 ? _a : null;
+    var _a;
+    const rpcUrl = normalizeSolanaRpcUrl(config.rpcUrl);
+    const configuredNetwork = getConfiguredSolanaNetwork(config);
     const SolanaMobileWalletProvider = await loadSolanaMobileWalletProvider();
-    const mwaConfig = (_b = config.mobileWalletConfig) !== null && _b !== void 0 ? _b : {
-        appIdentity: {
-            name: config.name || undefined,
-            uri: getPlatform().getLocationOrigin(),
-        },
-    };
-    const mwaProvider = new SolanaMobileWalletProvider(rpcUrl, mwaConfig);
+    const mwaConfig = config.mobileWalletConfig
+        ? requireMobileWalletConfig(config)
+        : {
+            appIdentity: {
+                name: config.name || undefined,
+                uri: getPlatform().getLocationOrigin(),
+            },
+            cluster: (_a = mobileWalletClusterFromNetwork(configuredNetwork)) !== null && _a !== void 0 ? _a : undefined,
+        };
+    if (!mwaConfig.cluster) {
+        throw new Error("Mobile wallet auth requires config.chain or mobileWalletConfig.cluster before switching providers.");
+    }
+    const mwaProvider = new SolanaMobileWalletProvider(rpcUrl, mwaConfig, configuredNetwork);
     let provider = mwaProvider;
     if (config.chain === "offchain") {
         provider = new OffchainAuthProvider(mwaProvider);
@@ -7063,11 +7156,8 @@ async function hotSwapToMWAProvider(config) {
     setAuthProviderInstance(provider);
     return provider;
 }
-const SOLANA_DEVNET_RPC_URL = "https://idelle-8nxsep-fast-devnet.helius-rpc.com";
-const SOLANA_MAINNET_RPC_URL = "https://celestia-cegncv-fast-mainnet.helius-rpc.com";
-const SURFNET_RPC_URL$1 = "https://surfpool.fly.dev";
 async function getAuthProvider(config) {
-    var _a, _b, _c;
+    var _a, _b;
     if (currentAuthProvider) {
         return currentAuthProvider;
     }
@@ -7081,17 +7171,12 @@ async function getAuthProvider(config) {
         currentAuthProvider = new MockAuthProvider();
         return currentAuthProvider;
     }
-    // If the user previously logged in with a specific method, use that instead
-    const validAuthMethods = ['email', 'phantom', 'wallet', 'rainbowkit', 'coinbase-smart-wallet', 'onboard', 'mobile-wallet-adapter', 'guest', 'privy', 'privy-expo', 'none'];
-    const storedMethod = getStoredAuthMethod();
-    const authMethod = (storedMethod && validAuthMethods.includes(storedMethod))
-        ? storedMethod
-        : (config.authMethod || "email");
-    if (storedMethod && !validAuthMethods.includes(storedMethod)) {
-        // Invalid stored value — clear it
-        setStoredAuthMethod(null);
-    }
-    const rpcUrl = (_a = config.rpcUrl) !== null && _a !== void 0 ? _a : null;
+    const authMethod = config.authMethod;
+    if (!authMethod) {
+        throw new Error("authMethod is required to initialize auth provider; configure the single intended auth method explicitly.");
+    }
+    const rpcUrl = normalizeSolanaRpcUrl(config.rpcUrl);
+    const configuredNetwork = getConfiguredSolanaNetwork(config);
     currentAuthMethod = authMethod;
     // Clear, actionable error when the BROWSER build (`bounded-sh`) is loaded in a
     // non-browser (Node) runtime. The wallet providers below need `window`; without
@@ -7121,7 +7206,7 @@ async function getAuthProvider(config) {
             break;
         case "phantom": {
             const { PhantomWalletProvider } = await loadPhantomWalletProvider();
-            currentAuthProvider = new PhantomWalletProvider(rpcUrl, config.phantomConfig);
+            currentAuthProvider = new PhantomWalletProvider(rpcUrl, config.phantomConfig, configuredNetwork);
             // MWA hot-swap is always available (custom modal shows MWA button on Android)
             currentAuthProvider.onSwitchToMWA =
                 () => hotSwapToMWAProvider(config);
@@ -7131,8 +7216,9 @@ async function getAuthProvider(config) {
             // Web Privy: a co-equal login route alongside email/phantom/guest. The
             // Privy embedded/external Solana wallet signs the SIWS challenge, so the
             // session is minted through the same wallet path as Phantom.
+            const privyConfig = requireWebPrivyConfig(config);
             const PrivyWalletProvider = await loadPrivyWalletProvider();
-            currentAuthProvider = new PrivyWalletProvider((_b = config.name) !== null && _b !== void 0 ? _b : null, (_c = config.logoUrl) !== null && _c !== void 0 ? _c : null, config.privyConfig, rpcUrl);
+            currentAuthProvider = new PrivyWalletProvider((_a = config.name) !== null && _a !== void 0 ? _a : null, (_b = config.logoUrl) !== null && _b !== void 0 ? _b : null, privyConfig, rpcUrl, configuredNetwork);
             break;
         }
         case "privy-expo":
@@ -7147,7 +7233,7 @@ async function getAuthProvider(config) {
             break;
         case "mobile-wallet-adapter": {
             const SolanaMobileWalletProvider = await loadSolanaMobileWalletProvider();
-            currentAuthProvider = new SolanaMobileWalletProvider(rpcUrl, config.mobileWalletConfig);
+            currentAuthProvider = new SolanaMobileWalletProvider(rpcUrl, requireMobileWalletConfig(config), configuredNetwork);
             break;
         }
         case "onboard":
@@ -7217,13 +7303,14 @@ async function signInAnonymously() {
  * (web localStorage / RN storage) and identity model. `init()` must have run first.
  */
 async function loginWithPrivy(options) {
-    var _a, _b, _c;
+    var _a, _b;
     assertBrowserAuthEnv('loginWithPrivy');
     const coreConfig = await getConfig();
     let provider;
     if (getPlatform().hasDOM) {
+        const privyConfig = requireWebPrivyConfig(coreConfig);
         const PrivyWalletProvider = await loadPrivyWalletProvider();
-        provider = new PrivyWalletProvider((_a = coreConfig.name) !== null && _a !== void 0 ? _a : null, (_b = coreConfig.logoUrl) !== null && _b !== void 0 ? _b : null, coreConfig.privyConfig, (_c = coreConfig.rpcUrl) !== null && _c !== void 0 ? _c : null);
+        provider = new PrivyWalletProvider((_a = coreConfig.name) !== null && _a !== void 0 ? _a : null, (_b = coreConfig.logoUrl) !== null && _b !== void 0 ? _b : null, privyConfig, normalizeSolanaRpcUrl(coreConfig.rpcUrl), getConfiguredSolanaNetwork(coreConfig));
         currentAuthMethod = 'privy';
     }
     else {
@@ -7369,15 +7456,13 @@ async function logout$1() {
         throw new Error("Auth provider not initialized. Please call init() first.");
     }
     // Revoke the refresh-token family server-side BEFORE the provider clears the
-    // local session (so we still have the token + issuer to revoke). Best-effort:
-    // revokeSession swallows errors so logout never hangs/fails on a network blip.
-    try {
-        const sm = getActiveSessionManager();
-        const refreshToken = sm.getRefreshToken();
-        if (refreshToken)
-            await revokeSession(refreshToken, (_a = sm.getIssuer()) !== null && _a !== void 0 ? _a : undefined);
-    }
-    catch ( /* proceed with local logout regardless */_b) { /* proceed with local logout regardless */ }
+    // local session (so we still have the token + issuer to revoke). If revoke
+    // fails, surface the error and leave local state intact so callers do not
+    // mistake a local-only logout for server revocation.
+    const sm = getActiveSessionManager();
+    const refreshToken = sm.getRefreshToken();
+    if (refreshToken)
+        await revokeSession(refreshToken, (_a = sm.getIssuer()) !== null && _a !== void 0 ? _a : undefined);
     await currentAuthProvider.logout();
     setStoredAuthMethod(null);
     currentAuthProvider = null;
@@ -7708,7 +7793,6 @@ async function confirmAndCheckTransaction(connection, signature) {
  * to host Privy's React context, this provider expects the RN app itself
  * to render <PrivyProvider> and then bridge the hooks via setPrivyMethods().
  */
-const SURFNET_RPC_URL = 'https://surfpool.fly.dev';
 // -----------------------------------------------------------------------
 // Provider implementation
 // -----------------------------------------------------------------------
@@ -7716,7 +7800,7 @@ class PrivyExpoProvider {
     constructor(appId, networkUrl = null) {
         this.privyMethods = null;
         this.appId = appId;
-        this.networkUrl = networkUrl;
+        this.networkUrl = normalizeSolanaRpcUrl(networkUrl);
     }
     /**
      * Bridge Privy hooks from the app's React tree into this provider.
@@ -8001,15 +8085,7 @@ class PrivyExpoProvider {
         return { signature, txInfo };
     }
     getRpcUrl(network) {
-        if (this.networkUrl)
-            return this.networkUrl;
-        if (network === 'solana_devnet')
-            return SOLANA_DEVNET_RPC_URL;
-        if (network === 'solana_mainnet')
-            return SOLANA_MAINNET_RPC_URL;
-        if (network === 'surfnet')
-            return SURFNET_RPC_URL;
-        return SOLANA_MAINNET_RPC_URL;
+        return resolveSolanaRpcUrl(this.networkUrl, network, "Privy Expo Solana transaction");
     }
     async ensureReady(timeoutMs = 15000) {
         if (!this.privyMethods) {
@@ -8037,5 +8113,5 @@ class PrivyExpoProvider {
     }
 }
 
-export { linkWithRedirect as A, completeLoginFromRedirect as B, loginWithPopup as C, completeLoginInPopup as D, useAuth as E, deserializeTransaction as F, getIdToken as G, setPlatform as H, DEFAULT_TEST_ADDRESS as I, index as J, MockAuthProvider as M, OffchainAuthProvider as O, PrivyExpoProvider as P, SOLANA_DEVNET_RPC_URL as S, SOLANA_MAINNET_RPC_URL as a, bufferExports as b, confirmAndCheckTransaction as c, SURFNET_RPC_URL$1 as d, detectMobile as e, detectAndroid as f, getPlatform as g, setAuthLoading as h, bs58 as i, init as j, getCurrentUser as k, onAuthLoadingChanged as l, getAuthLoading as m, login as n, onAuthStateChanged as o, logout as p, getAuthProvider as q, signInAnonymously as r, setCurrentUser as s, sendEmailOtp as t, sendTextOtp as u, verifyEmailOtp as v, verifyTextOtp as w, linkEmail as x, loginWithPrivy as y, loginWithRedirect as z };
-//# sourceMappingURL=index.native-DlMO7aHv.mjs.map
+export { loginWithRedirect as A, linkWithRedirect as B, completeLoginFromRedirect as C, loginWithPopup as D, completeLoginInPopup as E, useAuth as F, deserializeTransaction as G, getIdToken as H, setPlatform as I, DEFAULT_TEST_ADDRESS as J, index as K, MockAuthProvider as M, OffchainAuthProvider as O, PrivyExpoProvider as P, SURFNET_RPC_URL as S, detectAndroid as a, bufferExports as b, confirmAndCheckTransaction as c, detectMobile as d, setAuthLoading as e, resolveSolanaWalletStandardChain as f, getPlatform as g, bs58 as h, init as i, getCurrentUser as j, onAuthLoadingChanged as k, getAuthLoading as l, login as m, normalizeSolanaRpcUrl as n, onAuthStateChanged as o, logout as p, getAuthProvider as q, resolveSolanaRpcUrl as r, setCurrentUser as s, signInAnonymously as t, sendEmailOtp as u, sendTextOtp as v, verifyEmailOtp as w, verifyTextOtp as x, linkEmail as y, loginWithPrivy as z };
+//# sourceMappingURL=index.native-DahSrHrM.mjs.map