@bounded-sh/client 0.0.17 → 0.0.18

package/dist/{index.native-DoiNBZlU.js → index.native-Dr3FOz16.js}

@@ -6692,6 +6692,50 @@ const MODAL_CSS = `
 #bounded-auth-modal .hidden{display:none;}
 @media (max-width:480px){#bounded-auth-modal .ba-card{max-width:none;border-radius:16px;}}`;
 
+const SURFNET_RPC_URL = "https://surfpool.fly.dev";
+const SUPPORTED_SOLANA_NETWORKS = new Set([
+    "solana_devnet",
+    "solana_mainnet",
+    "surfnet",
+]);
+function normalizeSolanaRpcUrl(rpcUrl) {
+    if (typeof rpcUrl !== "string")
+        return null;
+    const trimmed = rpcUrl.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
+function isSupportedSolanaRpcNetwork(network) {
+    return typeof network === "string" && SUPPORTED_SOLANA_NETWORKS.has(network);
+}
+function resolveSolanaWalletStandardChain(network, context) {
+    switch (network) {
+        case "solana_devnet":
+            return "solana:devnet";
+        case "solana_mainnet":
+            return "solana:mainnet";
+        case "surfnet":
+            return "solana:localnet";
+        case undefined:
+        case null:
+        case "":
+            throw new Error(`${context} requires an explicit Solana network. ` +
+                `Provide one of: solana_devnet, solana_mainnet, surfnet.`);
+        default:
+            throw new Error(`${context} does not support Solana network "${network}". ` +
+                `Expected one of: solana_devnet, solana_mainnet, surfnet.`);
+    }
+}
+function resolveSolanaRpcUrl(explicitRpcUrl, network, context) {
+    if (network != null && network !== "" && !isSupportedSolanaRpcNetwork(network)) {
+        throw new Error(`${context} does not support Solana network "${network}". ` +
+            `Expected one of: solana_devnet, solana_mainnet, surfnet.`);
+    }
+    const rpcUrl = normalizeSolanaRpcUrl(explicitRpcUrl);
+    if (rpcUrl)
+        return rpcUrl;
+    throw new Error(`${context} requires an explicit Solana RPC URL. Pass config.rpcUrl before signing or submitting onchain transactions.`);
+}
+
 const PKCE_STORE_KEY = 'bounded.oidc.pkce';
 // Active session store (Web on web, RN on React Native) — selected by config,
 // not by `typeof window` (truthy on RN). OIDC redirect/popup is web-only, but the
@@ -6998,7 +7042,7 @@ async function exchangeCode(code, verifier, redirectUri) {
 let currentAuthProvider = null;
 let currentAuthMethod = null;
 let initConfig = null;
-// --- localStorage helpers: track which auth method the user last logged in with ---
+// --- localStorage helpers: track which auth method created the active session ---
 const STORED_AUTH_METHOD_KEY = 'bounded_last_auth_method';
 function getStoredAuthMethod() {
     try {
@@ -7022,7 +7066,7 @@ function setStoredAuthMethod(method) {
     }
 }
 /**
- * Clears the session if it was created before auth method tracking (legacy session).
+ * Clears the session if it was created by a different auth method.
  * Returns true if the session was cleared, false if the session is compatible.
  *
  * Dispatches to the correct session manager based on the current auth method
@@ -7030,47 +7074,96 @@ function setStoredAuthMethod(method) {
  * are properly cleared.
  */
 function clearIncompatibleSession() {
-    if (getStoredAuthMethod() !== null) {
-        return false; // Auth method is tracked — session is compatible
+    if (getStoredAuthMethod() === currentAuthMethod) {
+        return false;
     }
-    // Legacy session (no stored auth method) — clear it so the user re-authenticates
-    // with the correct provider.
-    // Clear both managers — on web the RN manager is a no-op (not configured),
-    // on RN the web manager is a no-op (no localStorage).
+    // Clear both managers: on web the RN manager is a no-op (not configured),
+    // and on RN the web manager is a no-op (no localStorage).
     core.WebSessionManager.clearSession();
     try {
         core.ReactNativeSessionManager.clearSession();
     }
     catch ( /* not configured on web */_a) { /* not configured on web */ }
+    setStoredAuthMethod(null);
     return true;
 }
 // Lazy loaders for web-only providers.
 // Using dynamic import() ensures Metro (RN) never resolves these modules.
 async function loadPhantomWalletProvider() {
-    const mod = await Promise.resolve().then(function () { return require('./phantom-wallet-provider-DUdnFoyb.js'); });
+    const mod = await Promise.resolve().then(function () { return require('./phantom-wallet-provider-CeLJEdcL.js'); });
     return { PhantomWalletProvider: mod.PhantomWalletProvider };
 }
 // Web Privy provider (depends on react-dom + @privy-io/react-auth). Lazy so Metro
 // never bundles it into the RN build — RN uses the @privy-io/expo provider instead.
 async function loadPrivyWalletProvider() {
-    const mod = await Promise.resolve().then(function () { return require('./privy-wallet-provider-Kv6H3xcS.js'); });
+    const mod = await Promise.resolve().then(function () { return require('./privy-wallet-provider-BSwx78fY.js'); });
     return mod.PrivyWalletProvider;
 }
 async function loadSolanaMobileWalletProvider() {
-    const mod = await Promise.resolve().then(function () { return require('./solana-mobile-wallet-provider-BfHBucO0.js'); });
+    const mod = await Promise.resolve().then(function () { return require('./solana-mobile-wallet-provider-BvCrAgk8.js'); });
     return mod.SolanaMobileWalletProvider;
 }
+function requireWebPrivyConfig(config) {
+    if (!config.privyConfig || typeof config.privyConfig.appId !== 'string' || config.privyConfig.appId.trim() === '') {
+        throw new Error('Privy auth requires config.privyConfig.appId; no default Privy app is used.');
+    }
+    if (!config.privyConfig.config || typeof config.privyConfig.config !== 'object') {
+        throw new Error('Privy auth requires config.privyConfig.config for the app-scoped Privy provider.');
+    }
+    return config.privyConfig;
+}
+function getConfiguredSolanaNetwork(config) {
+    if (typeof config.chain !== 'string')
+        return null;
+    const chain = config.chain.trim();
+    if (chain === '' || chain === 'offchain')
+        return null;
+    return chain;
+}
+function mobileWalletClusterFromNetwork(network) {
+    switch (network) {
+        case "solana_devnet":
+            return "devnet";
+        case "solana_mainnet":
+            return "mainnet-beta";
+        case "surfnet":
+            return "localnet";
+        case null:
+            return null;
+        default:
+            resolveSolanaWalletStandardChain(network, "Mobile wallet auth");
+            return null;
+    }
+}
+function requireMobileWalletConfig(config) {
+    var _a, _b, _c;
+    const configuredNetwork = getConfiguredSolanaNetwork(config);
+    const cluster = (_b = (_a = config.mobileWalletConfig) === null || _a === void 0 ? void 0 : _a.cluster) !== null && _b !== void 0 ? _b : mobileWalletClusterFromNetwork(configuredNetwork);
+    if (!cluster) {
+        throw new Error("Mobile wallet auth requires an explicit Solana network. " +
+            "Pass config.chain as solana_devnet, solana_mainnet, or surfnet, " +
+            "or pass mobileWalletConfig.cluster.");
+    }
+    return Object.assign(Object.assign({}, ((_c = config.mobileWalletConfig) !== null && _c !== void 0 ? _c : {})), { cluster });
+}
 async function hotSwapToMWAProvider(config) {
-    var _a, _b;
-    const rpcUrl = (_a = config.rpcUrl) !== null && _a !== void 0 ? _a : null;
+    var _a;
+    const rpcUrl = normalizeSolanaRpcUrl(config.rpcUrl);
+    const configuredNetwork = getConfiguredSolanaNetwork(config);
     const SolanaMobileWalletProvider = await loadSolanaMobileWalletProvider();
-    const mwaConfig = (_b = config.mobileWalletConfig) !== null && _b !== void 0 ? _b : {
-        appIdentity: {
-            name: config.name || undefined,
-            uri: getPlatform().getLocationOrigin(),
-        },
-    };
-    const mwaProvider = new SolanaMobileWalletProvider(rpcUrl, mwaConfig);
+    const mwaConfig = config.mobileWalletConfig
+        ? requireMobileWalletConfig(config)
+        : {
+            appIdentity: {
+                name: config.name || undefined,
+                uri: getPlatform().getLocationOrigin(),
+            },
+            cluster: (_a = mobileWalletClusterFromNetwork(configuredNetwork)) !== null && _a !== void 0 ? _a : undefined,
+        };
+    if (!mwaConfig.cluster) {
+        throw new Error("Mobile wallet auth requires config.chain or mobileWalletConfig.cluster before switching providers.");
+    }
+    const mwaProvider = new SolanaMobileWalletProvider(rpcUrl, mwaConfig, configuredNetwork);
     let provider = mwaProvider;
     if (config.chain === "offchain") {
         provider = new OffchainAuthProvider(mwaProvider);
@@ -7085,11 +7178,8 @@ async function hotSwapToMWAProvider(config) {
     setAuthProviderInstance(provider);
     return provider;
 }
-const SOLANA_DEVNET_RPC_URL = "https://idelle-8nxsep-fast-devnet.helius-rpc.com";
-const SOLANA_MAINNET_RPC_URL = "https://celestia-cegncv-fast-mainnet.helius-rpc.com";
-const SURFNET_RPC_URL$1 = "https://surfpool.fly.dev";
 async function getAuthProvider(config) {
-    var _a, _b, _c;
+    var _a, _b;
     if (currentAuthProvider) {
         return currentAuthProvider;
     }
@@ -7103,17 +7193,12 @@ async function getAuthProvider(config) {
         currentAuthProvider = new MockAuthProvider();
         return currentAuthProvider;
     }
-    // If the user previously logged in with a specific method, use that instead
-    const validAuthMethods = ['email', 'phantom', 'wallet', 'rainbowkit', 'coinbase-smart-wallet', 'onboard', 'mobile-wallet-adapter', 'guest', 'privy', 'privy-expo', 'none'];
-    const storedMethod = getStoredAuthMethod();
-    const authMethod = (storedMethod && validAuthMethods.includes(storedMethod))
-        ? storedMethod
-        : (config.authMethod || "email");
-    if (storedMethod && !validAuthMethods.includes(storedMethod)) {
-        // Invalid stored value — clear it
-        setStoredAuthMethod(null);
-    }
-    const rpcUrl = (_a = config.rpcUrl) !== null && _a !== void 0 ? _a : null;
+    const authMethod = config.authMethod;
+    if (!authMethod) {
+        throw new Error("authMethod is required to initialize auth provider; configure the single intended auth method explicitly.");
+    }
+    const rpcUrl = normalizeSolanaRpcUrl(config.rpcUrl);
+    const configuredNetwork = getConfiguredSolanaNetwork(config);
     currentAuthMethod = authMethod;
     // Clear, actionable error when the BROWSER build (`bounded-sh`) is loaded in a
     // non-browser (Node) runtime. The wallet providers below need `window`; without
@@ -7143,7 +7228,7 @@ async function getAuthProvider(config) {
             break;
         case "phantom": {
             const { PhantomWalletProvider } = await loadPhantomWalletProvider();
-            currentAuthProvider = new PhantomWalletProvider(rpcUrl, config.phantomConfig);
+            currentAuthProvider = new PhantomWalletProvider(rpcUrl, config.phantomConfig, configuredNetwork);
             // MWA hot-swap is always available (custom modal shows MWA button on Android)
             currentAuthProvider.onSwitchToMWA =
                 () => hotSwapToMWAProvider(config);
@@ -7153,8 +7238,9 @@ async function getAuthProvider(config) {
             // Web Privy: a co-equal login route alongside email/phantom/guest. The
             // Privy embedded/external Solana wallet signs the SIWS challenge, so the
             // session is minted through the same wallet path as Phantom.
+            const privyConfig = requireWebPrivyConfig(config);
             const PrivyWalletProvider = await loadPrivyWalletProvider();
-            currentAuthProvider = new PrivyWalletProvider((_b = config.name) !== null && _b !== void 0 ? _b : null, (_c = config.logoUrl) !== null && _c !== void 0 ? _c : null, config.privyConfig, rpcUrl);
+            currentAuthProvider = new PrivyWalletProvider((_a = config.name) !== null && _a !== void 0 ? _a : null, (_b = config.logoUrl) !== null && _b !== void 0 ? _b : null, privyConfig, rpcUrl, configuredNetwork);
             break;
         }
         case "privy-expo":
@@ -7169,7 +7255,7 @@ async function getAuthProvider(config) {
             break;
         case "mobile-wallet-adapter": {
             const SolanaMobileWalletProvider = await loadSolanaMobileWalletProvider();
-            currentAuthProvider = new SolanaMobileWalletProvider(rpcUrl, config.mobileWalletConfig);
+            currentAuthProvider = new SolanaMobileWalletProvider(rpcUrl, requireMobileWalletConfig(config), configuredNetwork);
             break;
         }
         case "onboard":
@@ -7239,13 +7325,14 @@ async function signInAnonymously() {
  * (web localStorage / RN storage) and identity model. `init()` must have run first.
  */
 async function loginWithPrivy(options) {
-    var _a, _b, _c;
+    var _a, _b;
     assertBrowserAuthEnv('loginWithPrivy');
     const coreConfig = await core.getConfig();
     let provider;
     if (getPlatform().hasDOM) {
+        const privyConfig = requireWebPrivyConfig(coreConfig);
         const PrivyWalletProvider = await loadPrivyWalletProvider();
-        provider = new PrivyWalletProvider((_a = coreConfig.name) !== null && _a !== void 0 ? _a : null, (_b = coreConfig.logoUrl) !== null && _b !== void 0 ? _b : null, coreConfig.privyConfig, (_c = coreConfig.rpcUrl) !== null && _c !== void 0 ? _c : null);
+        provider = new PrivyWalletProvider((_a = coreConfig.name) !== null && _a !== void 0 ? _a : null, (_b = coreConfig.logoUrl) !== null && _b !== void 0 ? _b : null, privyConfig, normalizeSolanaRpcUrl(coreConfig.rpcUrl), getConfiguredSolanaNetwork(coreConfig));
         currentAuthMethod = 'privy';
     }
     else {
@@ -7391,15 +7478,13 @@ async function logout$1() {
         throw new Error("Auth provider not initialized. Please call init() first.");
     }
     // Revoke the refresh-token family server-side BEFORE the provider clears the
-    // local session (so we still have the token + issuer to revoke). Best-effort:
-    // revokeSession swallows errors so logout never hangs/fails on a network blip.
-    try {
-        const sm = core.getActiveSessionManager();
-        const refreshToken = sm.getRefreshToken();
-        if (refreshToken)
-            await core.revokeSession(refreshToken, (_a = sm.getIssuer()) !== null && _a !== void 0 ? _a : undefined);
-    }
-    catch ( /* proceed with local logout regardless */_b) { /* proceed with local logout regardless */ }
+    // local session (so we still have the token + issuer to revoke). If revoke
+    // fails, surface the error and leave local state intact so callers do not
+    // mistake a local-only logout for server revocation.
+    const sm = core.getActiveSessionManager();
+    const refreshToken = sm.getRefreshToken();
+    if (refreshToken)
+        await core.revokeSession(refreshToken, (_a = sm.getIssuer()) !== null && _a !== void 0 ? _a : undefined);
     await currentAuthProvider.logout();
     setStoredAuthMethod(null);
     currentAuthProvider = null;
@@ -7730,7 +7815,6 @@ async function confirmAndCheckTransaction(connection, signature) {
  * to host Privy's React context, this provider expects the RN app itself
  * to render <PrivyProvider> and then bridge the hooks via setPrivyMethods().
  */
-const SURFNET_RPC_URL = 'https://surfpool.fly.dev';
 // -----------------------------------------------------------------------
 // Provider implementation
 // -----------------------------------------------------------------------
@@ -7738,7 +7822,7 @@ class PrivyExpoProvider {
     constructor(appId, networkUrl = null) {
         this.privyMethods = null;
         this.appId = appId;
-        this.networkUrl = networkUrl;
+        this.networkUrl = normalizeSolanaRpcUrl(networkUrl);
     }
     /**
      * Bridge Privy hooks from the app's React tree into this provider.
@@ -8023,15 +8107,7 @@ class PrivyExpoProvider {
         return { signature, txInfo };
     }
     getRpcUrl(network) {
-        if (this.networkUrl)
-            return this.networkUrl;
-        if (network === 'solana_devnet')
-            return SOLANA_DEVNET_RPC_URL;
-        if (network === 'solana_mainnet')
-            return SOLANA_MAINNET_RPC_URL;
-        if (network === 'surfnet')
-            return SURFNET_RPC_URL;
-        return SOLANA_MAINNET_RPC_URL;
+        return resolveSolanaRpcUrl(this.networkUrl, network, "Privy Expo Solana transaction");
     }
     async ensureReady(timeoutMs = 15000) {
         if (!this.privyMethods) {
@@ -8063,9 +8139,7 @@ exports.DEFAULT_TEST_ADDRESS = DEFAULT_TEST_ADDRESS;
 exports.MockAuthProvider = MockAuthProvider;
 exports.OffchainAuthProvider = OffchainAuthProvider;
 exports.PrivyExpoProvider = PrivyExpoProvider;
-exports.SOLANA_DEVNET_RPC_URL = SOLANA_DEVNET_RPC_URL;
-exports.SOLANA_MAINNET_RPC_URL = SOLANA_MAINNET_RPC_URL;
-exports.SURFNET_RPC_URL = SURFNET_RPC_URL$1;
+exports.SURFNET_RPC_URL = SURFNET_RPC_URL;
 exports.bs58 = bs58;
 exports.bufferExports = bufferExports;
 exports.completeLoginFromRedirect = completeLoginFromRedirect;
@@ -8088,8 +8162,11 @@ exports.loginWithPopup = loginWithPopup;
 exports.loginWithPrivy = loginWithPrivy;
 exports.loginWithRedirect = loginWithRedirect;
 exports.logout = logout;
+exports.normalizeSolanaRpcUrl = normalizeSolanaRpcUrl;
 exports.onAuthLoadingChanged = onAuthLoadingChanged;
 exports.onAuthStateChanged = onAuthStateChanged;
+exports.resolveSolanaRpcUrl = resolveSolanaRpcUrl;
+exports.resolveSolanaWalletStandardChain = resolveSolanaWalletStandardChain;
 exports.sendEmailOtp = sendEmailOtp;
 exports.sendTextOtp = sendTextOtp;
 exports.setAuthLoading = setAuthLoading;
@@ -8099,4 +8176,4 @@ exports.signInAnonymously = signInAnonymously;
 exports.useAuth = useAuth;
 exports.verifyEmailOtp = verifyEmailOtp;
 exports.verifyTextOtp = verifyTextOtp;
-//# sourceMappingURL=index.native-DoiNBZlU.js.map
+//# sourceMappingURL=index.native-Dr3FOz16.js.map