@bounded-sh/client 0.0.19 → 0.0.21

package/README.md

@@ -66,13 +66,13 @@ yarn add @tarobase/js-sdk
 
   
 
-Before using the SDK, initialize it with your **Application ID**. You can obtain your `appId` by creating an application on the [Tarobase Console](https://console.tarobase.com). The console also allows you to configure your application's policies, including data storage preferences (on-chain or off-chain) and data schemas.
+Before using the SDK, initialize it with your **Application ID** and the one auth method this app intends to use. You can obtain your `appId` by creating an application on the [Tarobase Console](https://console.tarobase.com). The console also allows you to configure your application's policies, including data storage preferences (on-chain or off-chain) and data schemas.
 
   
 ```typescript
 import { init } from '@tarobase/js-sdk';
 
-init({appId: 'YOUR_APP_ID' });
+init({ appId: 'YOUR_APP_ID', authMethod: 'email' });
 ```  
 
 ### Authentication

package/dist/auth/providers/offchain-auth-provider.d.ts

@@ -9,9 +9,8 @@ export interface OffchainAuthProviderConfig {
 /**
  * OffchainAuthProvider wraps a real auth provider (e.g., Phantom) for the poofnet environment.
  *
- * For signMessageMock, this shows a custom confirmation modal and then delegates
- * to the wrapped provider for a real detached signature over the exact offchain
- * transaction message.
+ * signMessage shows a custom confirmation modal and then delegates to the wrapped
+ * provider for a real detached signature over the exact offchain transaction message.
  */
 export declare class OffchainAuthProvider implements AuthProvider {
     private wrappedProvider;
@@ -31,7 +30,6 @@ export declare class OffchainAuthProvider implements AuthProvider {
     signAndSubmitTransaction(_transaction: Transaction | VersionedTransaction, _feePayer?: any): Promise<string>;
     getNativeMethods(): Promise<any>;
     signMessage(message: string): Promise<string>;
-    signMessageMock(message: string): Promise<string>;
     private showUnsupportedTransactionModal;
     private showTransactionModal;
     private closeModal;

package/dist/index.d.ts

@@ -16,7 +16,6 @@ export { getIdToken } from "./utils";
 export { setPlatform, getPlatform } from "./platform";
 export type { PlatformAdapter, StorageAdapter } from "./platform";
 export { PhantomWalletProvider, PhantomWalletConfig, PhantomProviderType, } from "./auth/providers/phantom-wallet-provider";
-export { MockAuthProvider, DEFAULT_TEST_ADDRESS, } from "./auth/providers/mock-auth-provider";
 export { OffchainAuthProvider, OffchainAuthProviderConfig, } from "./auth/providers/offchain-auth-provider";
 export { SolanaMobileWalletProvider, SolanaMobileWalletConfig, isMobileWalletAvailable, registerMobileWalletAdapter, } from "./auth/providers/solana-mobile-wallet-provider";
 export { PrivyWalletProvider } from "./auth/providers/privy-wallet-provider";

package/dist/index.js

@@ -180,142 +180,11 @@ function detectAndroid() {
     return false;
 }
 
-// Default test wallet address (Solana devnet address)
-const DEFAULT_TEST_ADDRESS = 'HKbZbRR7jWWR5VRN8KFjvTCHEzJQgameYxKQxh2gPoof';
-// Session storage key to track if user explicitly called login()
-const EXPLICIT_LOGIN_KEY = 'mock-auth-explicit-login';
-/**
- * MockAuthProvider bypasses real wallet authentication for testing purposes.
- * Uses session storage to simulate logged-in user, with fallback to default test address.
- *
- * This is enabled by passing mockAuth: true to init()
- */
-class MockAuthProvider {
-    /**
-     * Mock login - reads user from session storage or uses default test address
-     */
-    async login() {
-        let address = getPlatform().sessionStorage.getItem('test-user-address');
-        if (!address) {
-            address = DEFAULT_TEST_ADDRESS;
-            // Store default address in session storage so it gets used in API calls
-            getPlatform().sessionStorage.setItem('test-user-address', DEFAULT_TEST_ADDRESS);
-            console.log('[MockAuth] Using default test address:', address);
-        }
-        // Mark that user explicitly called login() - allows restoreSession on refresh
-        getPlatform().sessionStorage.setItem(EXPLICIT_LOGIN_KEY, 'true');
-        console.log('[MockAuth] Mock login successful:', address);
-        return {
-            address,
-            provider: this
-        };
-    }
-    /**
-     * Mock transaction - returns fake signature without actual blockchain interaction
-     * The real transaction will be handled by the backend using test headers
-     */
-    async runTransaction(evmTransactionData, solTransactionData, options) {
-        const address = getPlatform().sessionStorage.getItem('test-user-address') || DEFAULT_TEST_ADDRESS;
-        // Generate a fake transaction signature
-        const fakeSignature = `mock_tx_${Math.random().toString(36).substring(2, 15)}`;
-        console.log('[MockAuth] Mock transaction executed:', {
-            address,
-            signature: fakeSignature,
-            evmTx: evmTransactionData,
-            solTx: solTransactionData
-        });
-        return {
-            transactionSignature: fakeSignature,
-            signedTransaction: fakeSignature,
-            blockNumber: 0,
-            gasUsed: '0'
-        };
-    }
-    /**
-     * Mock message signing
-     */
-    async signMessage(message) {
-        const address = getPlatform().sessionStorage.getItem('test-user-address') || DEFAULT_TEST_ADDRESS;
-        // Generate a fake signature
-        const fakeSignature = `mock_sig_${Math.random().toString(36).substring(2, 15)}`;
-        console.log('[MockAuth] Mock message signed:', {
-            address,
-            message,
-            signature: fakeSignature
-        });
-        return fakeSignature;
-    }
-    async signMessageMock(message) {
-        const address = getPlatform().sessionStorage.getItem('test-user-address') || DEFAULT_TEST_ADDRESS;
-        const signature = `mock_sig_${Math.random().toString(36).substring(2, 15)}`;
-        console.log('[MockAuth] Mock message signed:', {
-            address,
-            message,
-            signature
-        });
-        return signature;
-    }
-    /**
-     * Mock transaction signing - returns the transaction as-is (no actual signing)
-     */
-    async signTransaction(transaction) {
-        console.log('[MockAuth] Mock transaction signing (no-op)');
-        return transaction;
-    }
-    /**
-     * Sign and submit transaction - not supported in mock environment.
-     * See the real providers (PhantomWalletProvider, SolanaKeypairProvider)
-     * for the full implementation with blockhash handling and feePayer support.
-     */
-    async signAndSubmitTransaction(_transaction, _feePayer) {
-        throw new Error('signAndSubmitTransaction is not supported in the mock environment');
-    }
-    /**
-     * Restore session - only restores if user previously called login() explicitly.
-     * This prevents auto-login on first page load, but allows session persistence after login.
-     */
-    async restoreSession() {
-        const explicitlyLoggedIn = getPlatform().sessionStorage.getItem(EXPLICIT_LOGIN_KEY);
-        if (!explicitlyLoggedIn) {
-            console.log('[MockAuth] No explicit login found. Call login() to authenticate.');
-            return null;
-        }
-        const address = getPlatform().sessionStorage.getItem('test-user-address');
-        if (!address) {
-            console.log('[MockAuth] No previous session found');
-            return null;
-        }
-        console.log('[MockAuth] Session restored:', address);
-        return {
-            address,
-            provider: this
-        };
-    }
-    /**
-     * Mock logout - clears test user from session storage
-     */
-    async logout() {
-        getPlatform().sessionStorage.removeItem('test-user-address');
-        getPlatform().sessionStorage.removeItem('test-user-id');
-        getPlatform().sessionStorage.removeItem(EXPLICIT_LOGIN_KEY);
-        console.log('[MockAuth] Mock logout successful');
-    }
-    /**
-     * Get native wallet methods (not needed for mock auth)
-     */
-    async getNativeMethods() {
-        return {
-        // Return empty object - no native methods needed for mock auth
-        };
-    }
-}
-
 /**
  * OffchainAuthProvider wraps a real auth provider (e.g., Phantom) for the poofnet environment.
  *
- * For signMessageMock, this shows a custom confirmation modal and then delegates
- * to the wrapped provider for a real detached signature over the exact offchain
- * transaction message.
+ * signMessage shows a custom confirmation modal and then delegates to the wrapped
+ * provider for a real detached signature over the exact offchain transaction message.
  */
 class OffchainAuthProvider {
     constructor(wrappedProvider, config = {}) {
@@ -366,13 +235,7 @@ class OffchainAuthProvider {
     }
     // ============ signMessage delegates to wrapped provider ============
     async signMessage(message) {
-        // Delegate to wrapped provider for real wallet signing
-        return this.wrappedProvider.signMessage(message);
-    }
-    // ============ Mock signMessage with Custom Modal for Offchain Transactions ============
-    async signMessageMock(message) {
         var _a, _b, _c, _d, _e, _f;
-        // Callback: signing started
         (_b = (_a = this.config).onSigningStart) === null || _b === void 0 ? void 0 : _b.call(_a);
         try {
             // On RN (no DOM), auto-confirm — there's no modal to show.
@@ -389,7 +252,6 @@ class OffchainAuthProvider {
             return signature;
         }
         catch (error) {
-            // Callback: signing error
             (_f = (_e = this.config).onSigningError) === null || _f === void 0 ? void 0 : _f.call(_e, error);
             throw error;
         }
@@ -4127,13 +3989,33 @@ function createEmailModalTree() {
     close.type = 'button';
     close.textContent = '×';
     card.appendChild(close);
+    // Brand row — the real Bounded mark (same geometry as bounded.sh) + wordmark.
     const brand = document.createElement('div');
     brand.className = 'ba-brand';
-    const dot = document.createElement('span');
-    dot.className = 'ba-dot';
-    brand.appendChild(dot);
-    brand.appendChild(document.createTextNode(' Sign in'));
+    const mark = document.createElement('span');
+    mark.className = 'ba-mark';
+    mark.setAttribute('aria-hidden', 'true');
+    mark.innerHTML =
+        '<svg width="24" height="24" viewBox="0 0 32 32" fill="none">' +
+            '<path class="ba-c ba-c1" d="M16 5 H5 V16"/>' +
+            '<path class="ba-c ba-c2" d="M16 5 H27 V16"/>' +
+            '<path class="ba-c ba-c3" d="M5 16 V27 H16"/>' +
+            '<path class="ba-c ba-c4" d="M27 16 V27 H16"/>' +
+            '</svg>';
+    brand.appendChild(mark);
+    const word = document.createElement('span');
+    word.className = 'ba-word';
+    word.textContent = 'bounded';
+    brand.appendChild(word);
     card.appendChild(brand);
+    const title = document.createElement('h1');
+    title.className = 'ba-title';
+    title.textContent = 'Sign in';
+    card.appendChild(title);
+    const sub = document.createElement('p');
+    sub.className = 'ba-subtitle';
+    sub.textContent = 'Continue with your email — no wallet needed.';
+    card.appendChild(sub);
     const emailStep = document.createElement('div');
     emailStep.id = 'ba-email-step';
     card.appendChild(emailStep);
@@ -4154,7 +4036,7 @@ function createEmailModalTree() {
     emailButton.id = 'ba-email-btn';
     emailButton.className = 'ba-btn';
     emailButton.type = 'button';
-    emailButton.textContent = 'Continue';
+    emailButton.textContent = 'Continue with email';
     emailStep.appendChild(emailButton);
     const otpStep = document.createElement('div');
     otpStep.id = 'ba-otp-step';
@@ -4199,37 +4081,67 @@ function createEmailModalTree() {
     card.appendChild(foot);
     return root;
 }
+// Design language matches the hosted Bounded login (auth.bounded.sh) and bounded.sh:
+// dark editorial panel, green accent, Schibsted Grotesk / Newsreader / JetBrains Mono,
+// the Bounded mark drawing itself in. Fonts load best-effort (scoped @import); every
+// rule has a system fallback so the modal looks right even if Google Fonts is blocked.
+// All selectors are scoped under #bounded-auth-modal so we never leak into the host page.
 const MODAL_CSS = `
-#bounded-auth-modal .ba-overlay{position:fixed;inset:0;background:rgba(8,10,18,.62);backdrop-filter:blur(4px);
+@import url('https://fonts.googleapis.com/css2?family=Newsreader:opsz,wght@6..72,400;6..72,500&family=Schibsted+Grotesk:wght@400;500;600&family=JetBrains+Mono:wght@400;500&display=swap');
+#bounded-auth-modal{--ba-bg:#0a0a0b;--ba-panel:#0e0f11;--ba-inset:#060607;--ba-raise:#131416;
+ --ba-line:rgba(232,230,222,.08);--ba-line-strong:rgba(232,230,222,.16);
+ --ba-text:#e8e6de;--ba-dim:#9b9991;--ba-faint:#85837c;--ba-green:#58c98f;
+ --ba-green-bg:rgba(88,201,143,.09);--ba-green-line:rgba(88,201,143,.28);--ba-red:#ec8488;
+ --ba-body:'Schibsted Grotesk',-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;
+ --ba-display:'Newsreader','Iowan Old Style',Georgia,serif;
+ --ba-mono:'JetBrains Mono',ui-monospace,'SF Mono',Menlo,monospace;}
+#bounded-auth-modal .ba-overlay{position:fixed;inset:0;background:rgba(6,6,7,.66);backdrop-filter:blur(4px);
  display:flex;align-items:center;justify-content:center;z-index:2147483000;opacity:1;transition:opacity .16s ease;
- font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;padding:16px;}
+ font-family:var(--ba-body);padding:16px;}
 #bounded-auth-modal .ba-overlay.out{opacity:0;}
-#bounded-auth-modal .ba-card{width:100%;max-width:380px;background:#0f1117;color:#f4f5f7;border:1px solid #232838;
- border-radius:18px;padding:24px 22px 18px;box-shadow:0 24px 70px rgba(0,0,0,.5);position:relative;
- animation:ba-in .18s ease;}
-@keyframes ba-in{from{transform:translateY(10px);opacity:.6}to{transform:translateY(0);opacity:1}}
-#bounded-auth-modal .ba-x{position:absolute;top:12px;right:12px;width:30px;height:30px;border:none;background:#1a1e2b;
- color:#9aa3b2;border-radius:9px;font-size:20px;line-height:1;cursor:pointer;}
-#bounded-auth-modal .ba-x:hover{background:#222838;color:#fff;}
-#bounded-auth-modal .ba-brand{display:flex;align-items:center;gap:8px;font-weight:600;font-size:15px;margin:0 0 18px;}
-#bounded-auth-modal .ba-dot{width:10px;height:10px;border-radius:50%;background:linear-gradient(135deg,#8b5cf6,#22d3ee);}
-#bounded-auth-modal .ba-label{display:block;font-size:13px;color:#aab2c0;margin:0 0 8px;}
-#bounded-auth-modal .ba-em{color:#fff;font-weight:600;}
-#bounded-auth-modal .ba-input{width:100%;box-sizing:border-box;background:#171b26;border:1px solid #2a3040;color:#fff;
- border-radius:11px;padding:13px 14px;font-size:16px;outline:none;transition:border-color .12s;}
-#bounded-auth-modal .ba-input:focus{border-color:#7c5cff;}
-#bounded-auth-modal .ba-code{letter-spacing:8px;text-align:center;font-size:22px;font-variant-numeric:tabular-nums;}
-#bounded-auth-modal .ba-btn{width:100%;margin-top:12px;background:linear-gradient(135deg,#7c5cff,#5b8cff);color:#fff;
- border:none;border-radius:11px;padding:13px;font-size:15px;font-weight:600;cursor:pointer;transition:filter .12s;}
-#bounded-auth-modal .ba-btn:hover{filter:brightness(1.08);}
-#bounded-auth-modal .ba-btn:disabled{opacity:.6;cursor:default;}
-#bounded-auth-modal .ba-link{width:100%;margin-top:10px;background:none;border:none;color:#8aa0c6;font-size:13px;cursor:pointer;}
-#bounded-auth-modal .ba-link:hover{color:#bcd0f0;}
-#bounded-auth-modal .ba-msg{min-height:18px;margin-top:10px;font-size:13px;color:#8aa0c6;text-align:center;}
-#bounded-auth-modal .ba-msg.err{color:#ff8a8a;}
-#bounded-auth-modal .ba-foot{margin-top:14px;text-align:center;font-size:11px;color:#5a6273;}
+#bounded-auth-modal *{box-sizing:border-box;}
+#bounded-auth-modal .ba-card{width:100%;max-width:372px;background:var(--ba-panel);color:var(--ba-text);
+ border:1px solid var(--ba-line);border-radius:12px;padding:28px 28px 22px;position:relative;
+ box-shadow:0 1px 0 rgba(232,230,222,.03) inset,0 30px 80px -40px rgba(0,0,0,.8);animation:ba-in .18s ease;}
+@keyframes ba-in{from{transform:translateY(8px);opacity:.5}to{transform:translateY(0);opacity:1}}
+#bounded-auth-modal .ba-x{position:absolute;top:14px;right:14px;width:28px;height:28px;border:1px solid var(--ba-line);
+ background:var(--ba-raise);color:var(--ba-faint);border-radius:7px;font-size:18px;line-height:1;cursor:pointer;
+ transition:color .15s,border-color .15s;}
+#bounded-auth-modal .ba-x:hover{color:var(--ba-text);border-color:var(--ba-faint);}
+#bounded-auth-modal .ba-brand{display:flex;align-items:center;gap:10px;margin:0 0 24px;}
+#bounded-auth-modal .ba-mark{display:flex;color:var(--ba-text);}
+#bounded-auth-modal .ba-mark svg{overflow:visible;display:block;}
+#bounded-auth-modal .ba-c{stroke:currentColor;stroke-width:2.4;fill:none;}
+@media (prefers-reduced-motion:no-preference){
+ #bounded-auth-modal .ba-c{stroke-dasharray:23;stroke-dashoffset:23;animation:ba-draw .4s cubic-bezier(.45,0,.2,1) forwards;}
+ #bounded-auth-modal .ba-c1{animation-delay:.1s}#bounded-auth-modal .ba-c2{animation-delay:.38s}
+ #bounded-auth-modal .ba-c3{animation-delay:.66s}#bounded-auth-modal .ba-c4{animation-delay:.94s}}
+@keyframes ba-draw{to{stroke-dashoffset:0}}
+#bounded-auth-modal .ba-word{font-family:var(--ba-body);font-weight:500;font-size:15px;letter-spacing:.2px;color:var(--ba-text);}
+#bounded-auth-modal .ba-title{font-family:var(--ba-display);font-weight:400;font-size:25px;letter-spacing:-.01em;margin:0 0 5px;}
+#bounded-auth-modal .ba-subtitle{color:var(--ba-dim);font-size:14px;margin:0 0 22px;}
+#bounded-auth-modal .ba-label{display:block;font-size:12px;color:var(--ba-dim);margin:0 0 7px;}
+#bounded-auth-modal .ba-em{color:var(--ba-text);font-weight:600;}
+#bounded-auth-modal .ba-input{width:100%;background:var(--ba-inset);border:1px solid var(--ba-line-strong);color:var(--ba-text);
+ border-radius:6px;padding:11px 13px;font-family:var(--ba-body);font-size:15px;outline:none;transition:border-color .15s,box-shadow .15s;}
+#bounded-auth-modal .ba-input::placeholder{color:var(--ba-faint);}
+#bounded-auth-modal .ba-input:focus{border-color:var(--ba-green-line);box-shadow:0 0 0 3px var(--ba-green-bg);}
+#bounded-auth-modal .ba-code{font-family:var(--ba-mono);letter-spacing:8px;text-align:center;font-size:21px;padding-left:8px;}
+#bounded-auth-modal .ba-btn{width:100%;margin-top:16px;background:var(--ba-text);color:var(--ba-bg);
+ border:0;border-radius:6px;padding:12px;font-family:var(--ba-body);font-size:14px;font-weight:600;cursor:pointer;
+ transition:opacity .15s,transform .04s;}
+#bounded-auth-modal .ba-btn:hover{opacity:.9;}
+#bounded-auth-modal .ba-btn:active{transform:translateY(.5px);}
+#bounded-auth-modal .ba-btn:disabled{opacity:.45;cursor:default;}
+#bounded-auth-modal .ba-link{width:100%;margin-top:14px;background:none;border:none;color:var(--ba-dim);
+ font-family:var(--ba-body);font-size:12.5px;cursor:pointer;}
+#bounded-auth-modal .ba-link:hover{color:var(--ba-text);}
+#bounded-auth-modal .ba-msg{min-height:16px;margin-top:16px;font-size:12.5px;color:var(--ba-dim);text-align:center;}
+#bounded-auth-modal .ba-msg.err{color:var(--ba-red);}
+#bounded-auth-modal .ba-foot{margin-top:26px;padding-top:16px;border-top:1px solid var(--ba-line);
+ text-align:center;font-size:11px;color:var(--ba-faint);}
 #bounded-auth-modal .hidden{display:none;}
-@media (max-width:480px){#bounded-auth-modal .ba-card{max-width:none;border-radius:16px;}}`;
+@media (max-width:480px){#bounded-auth-modal .ba-card{max-width:none;}}`;
 
 const SURFNET_RPC_URL = "https://surfpool.fly.dev";
 const SUPPORTED_SOLANA_NETWORKS = new Set([
@@ -4276,6 +4188,7 @@ function resolveSolanaRpcUrl(explicitRpcUrl, network, context) {
 }
 
 const PKCE_STORE_KEY = 'bounded.oidc.pkce';
+const STORED_AUTH_METHOD_KEY$2 = 'bounded_last_auth_method';
 // Active session store (Web on web, RN on React Native) — selected by config,
 // not by `typeof window` (truthy on RN). OIDC redirect/popup is web-only, but the
 // session it mints is read back through this same selector everywhere.
@@ -4570,6 +4483,10 @@ async function exchangeCode(code, verifier, redirectUri) {
     const refreshToken = tokenField(data, 'refresh_token', 'refreshToken');
     const user = userFromIdToken(idToken);
     await sessionManager().storeSession(String(user.address || ''), accessToken, idToken, refreshToken, base);
+    try {
+        getPlatform().storage.setItem(STORED_AUTH_METHOD_KEY$2, 'email');
+    }
+    catch ( /* storage unavailable */_b) { /* storage unavailable */ }
     setCurrentUser(user);
     setAuthProviderInstance(oidcProviderSingleton);
     return user;
@@ -4580,7 +4497,10 @@ async function exchangeCode(code, verifier, redirectUri) {
 // (react-dom) when this module is imported on RN.
 let currentAuthProvider = null;
 let currentAuthMethod = null;
+let currentAuthProviderConfigKey = null;
 let initConfig = null;
+const objectIdentityKeys = new WeakMap();
+let nextObjectIdentityKey = 1;
 // --- localStorage helpers: track which auth method created the active session ---
 const STORED_AUTH_METHOD_KEY$1 = 'bounded_last_auth_method';
 function getStoredAuthMethod() {
@@ -4604,6 +4524,51 @@ function setStoredAuthMethod(method) {
         // storage might not be available
     }
 }
+function objectIdentityKey(value) {
+    if (!value || (typeof value !== 'object' && typeof value !== 'function'))
+        return null;
+    const obj = value;
+    let id = objectIdentityKeys.get(obj);
+    if (!id) {
+        id = nextObjectIdentityKey++;
+        objectIdentityKeys.set(obj, id);
+    }
+    return `object:${id}`;
+}
+function stableConfigValue(value, seen = new WeakSet()) {
+    if (value === null || typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'function')
+        return '[function]';
+    if (Array.isArray(value))
+        return value.map((item) => stableConfigValue(item, seen));
+    if (typeof value === 'object') {
+        if (seen.has(value))
+            return '[circular]';
+        seen.add(value);
+        const out = {};
+        for (const key of Object.keys(value).sort()) {
+            out[key] = stableConfigValue(value[key], seen);
+        }
+        seen.delete(value);
+        return out;
+    }
+    return String(value);
+}
+function authProviderConfigKey(config) {
+    var _a, _b, _c, _d, _e, _f, _g, _h;
+    return JSON.stringify({
+        authMethod: (_a = config.authMethod) !== null && _a !== void 0 ? _a : null,
+        chain: (_b = config.chain) !== null && _b !== void 0 ? _b : null,
+        rpcUrl: normalizeSolanaRpcUrl(config.rpcUrl),
+        name: (_c = config.name) !== null && _c !== void 0 ? _c : null,
+        logoUrl: (_d = config.logoUrl) !== null && _d !== void 0 ? _d : null,
+        phantomConfig: stableConfigValue((_e = config.phantomConfig) !== null && _e !== void 0 ? _e : null),
+        privyConfig: stableConfigValue((_f = config.privyConfig) !== null && _f !== void 0 ? _f : null),
+        mobileWalletConfig: stableConfigValue((_g = config.mobileWalletConfig) !== null && _g !== void 0 ? _g : null),
+        privyExpoProvider: objectIdentityKey((_h = config.privyExpoProvider) !== null && _h !== void 0 ? _h : null),
+    });
+}
 /**
  * Clears the session if it was created by a different auth method.
  * Returns true if the session was cleared, false if the session is compatible.
@@ -4685,38 +4650,6 @@ function requireMobileWalletConfig(config) {
     }
     return Object.assign(Object.assign({}, ((_c = config.mobileWalletConfig) !== null && _c !== void 0 ? _c : {})), { cluster });
 }
-function isLocalOrTestUrl(value) {
-    if (!value)
-        return false;
-    try {
-        const hostname = new URL(value).hostname.toLowerCase();
-        return hostname === 'localhost' ||
-            hostname === '127.0.0.1' ||
-            hostname === '::1' ||
-            hostname.endsWith('.localhost') ||
-            hostname.endsWith('.test');
-    }
-    catch (_a) {
-        return false;
-    }
-}
-function assertMockAuthLocalOnly(config) {
-    const requiredEndpoints = [
-        config.apiUrl,
-        config.wsApiUrl,
-        config.authApiUrl,
-    ];
-    const optionalEndpoints = [
-        config.rpcUrl,
-        config.humanAuthApiUrl,
-        config.functionsUrl,
-    ].filter((value) => typeof value === 'string' && value.trim() !== '');
-    if (requiredEndpoints.every(isLocalOrTestUrl) && optionalEndpoints.every(isLocalOrTestUrl)) {
-        return;
-    }
-    throw new Error("mockAuth is local/test-only. Pass explicit localhost/.test apiUrl, wsApiUrl, and authApiUrl values; " +
-        "mockAuth cannot be used with Bounded production or staging endpoints.");
-}
 async function hotSwapToMWAProvider(config) {
     var _a;
     const rpcUrl = normalizeSolanaRpcUrl(config.rpcUrl);
@@ -4741,6 +4674,7 @@ async function hotSwapToMWAProvider(config) {
     }
     currentAuthProvider = provider;
     currentAuthMethod = 'mobile-wallet-adapter';
+    currentAuthProviderConfigKey = authProviderConfigKey(Object.assign(Object.assign({}, config), { authMethod: 'mobile-wallet-adapter' }));
     const coreConfig = await core.getConfig();
     coreConfig.authProvider = provider;
     // Send 'phantom' as authMethod so the server routes to Solana verification.
@@ -4751,20 +4685,19 @@ async function hotSwapToMWAProvider(config) {
 }
 async function getAuthProvider(config) {
     var _a, _b;
-    if (currentAuthProvider) {
+    const nextProviderConfigKey = config ? authProviderConfigKey(config) : null;
+    if (currentAuthProvider && (!config || currentAuthProviderConfigKey === nextProviderConfigKey)) {
         return currentAuthProvider;
     }
     if (!config) {
         throw new Error("Config is required to initialize auth provider");
     }
-    initConfig = config;
-    // If mockAuth is enabled, use MockAuthProvider regardless of authMethod
-    if (config.mockAuth) {
-        assertMockAuthLocalOnly(config);
-        console.log("[MockAuth] Mock authentication enabled");
-        currentAuthProvider = new MockAuthProvider();
-        return currentAuthProvider;
+    if (currentAuthProvider && currentAuthProviderConfigKey !== nextProviderConfigKey) {
+        currentAuthProvider = null;
+        currentAuthMethod = null;
+        currentAuthProviderConfigKey = null;
     }
+    initConfig = config;
     const authMethod = config.authMethod;
     if (!authMethod) {
         throw new Error("authMethod is required to initialize auth provider; configure the single intended auth method explicitly.");
@@ -4846,6 +4779,7 @@ async function getAuthProvider(config) {
         console.log("[Offchain] Wrapping auth provider for Poofnet transaction tracking");
         currentAuthProvider = new OffchainAuthProvider(currentAuthProvider);
     }
+    currentAuthProviderConfigKey = nextProviderConfigKey;
     return currentAuthProvider;
 }
 /**
@@ -4875,6 +4809,7 @@ async function signInAnonymously() {
     const provider = new GuestAuthProvider();
     currentAuthProvider = provider;
     currentAuthMethod = 'guest';
+    currentAuthProviderConfigKey = 'direct:guest';
     const coreConfig = await core.getConfig();
     coreConfig.authProvider = provider;
     coreConfig.authMethod = 'guest';
@@ -4919,6 +4854,7 @@ async function loginWithPrivy(options) {
         provider = new OffchainAuthProvider(provider);
     }
     currentAuthProvider = provider;
+    currentAuthProviderConfigKey = authProviderConfigKey(Object.assign(Object.assign({}, coreConfig), { authMethod: currentAuthMethod }));
     coreConfig.authProvider = provider;
     coreConfig.authMethod = currentAuthMethod;
     setAuthProviderInstance(provider);
@@ -4935,6 +4871,7 @@ async function activateEmailProvider() {
     const provider = new EmailAuthProvider();
     currentAuthProvider = provider;
     currentAuthMethod = 'email';
+    currentAuthProviderConfigKey = 'direct:email';
     const coreConfig = await core.getConfig();
     coreConfig.authProvider = provider;
     coreConfig.authMethod = 'email';
@@ -5061,6 +4998,7 @@ async function logout$1() {
     setStoredAuthMethod(null);
     currentAuthProvider = null;
     currentAuthMethod = null;
+    currentAuthProviderConfigKey = null;
 }
 
 /**
@@ -9727,8 +9665,6 @@ Object.defineProperty(exports, "subscribe", {
     enumerable: true,
     get: function () { return core.subscribe; }
 });
-exports.DEFAULT_TEST_ADDRESS = DEFAULT_TEST_ADDRESS;
-exports.MockAuthProvider = MockAuthProvider;
 exports.OffchainAuthProvider = OffchainAuthProvider;
 exports.PhantomWalletProvider = PhantomWalletProvider;
 exports.PrivyExpoProvider = PrivyExpoProvider;