@bounded-sh/client 0.0.2 → 0.0.4

package/dist/{index-B2ytfYTB.esm.js → index-D5Ut2JU7.esm.js}

@@ -1,7 +1,7 @@
 import * as React from 'react';
 import { useContext, createContext, useState, useMemo, useRef, useEffect, useCallback } from 'react';
 import axios, { isAxiosError } from 'axios';
-import { b as bufferExports, g as getDefaultExportFromCjs, a as base58 } from './index-D986s6w7.esm.js';
+import { b as bufferExports, g as getDefaultExportFromCjs, a as bs582 } from './index-n4fG6EZJ.esm.js';
 import { Transaction as Transaction$1, VersionedTransaction } from '@solana/web3.js';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 import '@coral-xyz/anchor';
@@ -491,6 +491,50 @@ var GetAccountsMethodEnum;
     GetAccountsMethodEnum["getAccounts"] = "getAccounts";
 })(GetAccountsMethodEnum || (GetAccountsMethodEnum = {}));
 
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * kms-api
+ * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * @export
+ * @enum {string}
+ */
+var GetOrCreatePhantomOrganizationMethodEnum;
+(function (GetOrCreatePhantomOrganizationMethodEnum) {
+    GetOrCreatePhantomOrganizationMethodEnum["getOrCreatePhantomOrganization"] = "getOrCreatePhantomOrganization";
+})(GetOrCreatePhantomOrganizationMethodEnum || (GetOrCreatePhantomOrganizationMethodEnum = {}));
+
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * kms-api
+ * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * @export
+ * @enum {string}
+ */
+var GetOrganizationWalletsMethodEnum;
+(function (GetOrganizationWalletsMethodEnum) {
+    GetOrganizationWalletsMethodEnum["getOrganizationWallets"] = "getOrganizationWallets";
+})(GetOrganizationWalletsMethodEnum || (GetOrganizationWalletsMethodEnum = {}));
+
 /* tslint:disable */
 /* eslint-disable */
 /**
@@ -579,6 +623,13 @@ var UserPolicyOneOfTypeEnum;
     UserPolicyOneOfTypeEnum["root"] = "ROOT";
 })(UserPolicyOneOfTypeEnum || (UserPolicyOneOfTypeEnum = {}));
 
+// src/auth2.ts
+var TOKEN_REFRESH_BUFFER_MS = 15 * 60 * 1e3;
+var DEFAULT_AUTHENTICATOR_ALGORITHM = Algorithm.ed25519;
+
+// src/icons.ts
+var PHANTOM_ICON = "data:image/svg+xml;base64,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";
+
 // src/network-ids.ts
 var NetworkId = /* @__PURE__ */ ((NetworkId2) => {
   NetworkId2["SOLANA_MAINNET"] = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
@@ -882,13 +933,15 @@ var ANALYTICS_HEADERS = {
   SDK_VERSION: "x-phantom-sdk-version",
   // SDK version, e.g. 1.0.0
   PLATFORM: "x-phantom-platform",
-  // firefox, chrome, safari, ios, android, etc.
+  // ext-sdk for all SDK requests
   WALLET_TYPE: "x-phantom-wallet-type",
   // app-wallet, user-wallet
   APP_ID: "x-app-id",
   // Your application ID for identifying your app in analytics
-  PLATFORM_VERSION: "x-phantom-platform-version"
+  PLATFORM_VERSION: "x-phantom-platform-version",
   // OS version, device model, etc.
+  CLIENT: "x-phantom-client"
+  // mcp, chrome, firefox, safari, node, ios, android, etc.
 };
 
 // src/environments.ts
@@ -1000,6 +1053,12 @@ function isSolanaChain(networkId) {
   return network === "solana";
 }
 
+// src/index.ts
+async function sha256$2(input) {
+  const digest = await crypto.subtle.digest("SHA-256", input);
+  return new Uint8Array(digest);
+}
+
 // src/PhantomClient.ts
 var CAIP2_NETWORK_MAPPINGS = {
   // Solana networks
@@ -1179,6 +1238,12 @@ function getErrorMessage(error, fallbackMessage = "An error occurred") {
   }
   return fallbackMessage;
 }
+function isAuthenticationError(error) {
+  if (isAxiosError(error)) {
+    return error.response?.status === 401 || error.response?.status === 403;
+  }
+  return false;
+}
 function parseWalletServiceError(data) {
   if (!data || !data.type) {
     return null;
@@ -1213,6 +1278,7 @@ var PhantomClient = class {
       ...config,
       walletType: config.walletType || "user-wallet"
     };
+    this.logger = config.logger;
     this.axiosInstance = axios.create();
     const customHeaders = {};
     if (config.headers) {
@@ -1241,6 +1307,20 @@ var PhantomClient = class {
     }
     this.config.organizationId = organizationId;
   }
+  /**
+   * Gets the authenticator public key from the stamper if available.
+   * Returns undefined if the stamper doesn't support key info retrieval.
+   */
+  getAuthenticatorPublicKey() {
+    if (!this.stamper) {
+      return void 0;
+    }
+    if ("getKeyInfo" in this.stamper && typeof this.stamper.getKeyInfo === "function") {
+      const keyInfo = this.stamper.getKeyInfo();
+      return keyInfo?.publicKey;
+    }
+    return void 0;
+  }
   async createWallet(walletName) {
     try {
       if (!this.config.organizationId) {
@@ -1288,18 +1368,22 @@ var PhantomClient = class {
         }))
       };
     } catch (error) {
-      console.error("Failed to create wallet:", error.response?.data || error.message);
+      this.logger?.error(`Failed to create wallet: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to create wallet: ${error.response?.data?.message || error.message}`);
     }
   }
-  async prepare(transaction, organizationId, submissionConfig, account, methodName) {
+  async prepare(transaction, organizationId, submissionConfig, account, authenticatorPublicKey, methodName) {
     try {
       const request = {
         transaction,
         organizationId,
         submissionConfig,
-        simulationConfig: { account }
+        simulationConfig: { account },
+        authenticatorPublicKey
       };
+      this.logger?.debug(
+        `prepare request: submissionConfig=${JSON.stringify(submissionConfig)} account=${account} methodName=${methodName} txLength=${transaction.length} request=${JSON.stringify(request)}`
+      );
       const response = await this.axiosInstance.post(`${this.config.apiBaseUrl}/prepare`, request, {
         headers: {
           "Content-Type": "application/json",
@@ -1309,6 +1393,11 @@ var PhantomClient = class {
       return response.data;
     } catch (error) {
       const errorData = getAxiosErrorData(error);
+      const axiosStatus = error.response?.status;
+      const rawResponseData = error.response?.data;
+      this.logger?.error(
+        `[TX_DEBUG] prepare failed: status=${axiosStatus} methodName=${methodName} body=${JSON.stringify(rawResponseData)}`
+      );
       const walletServiceError = parseWalletServiceError(errorData);
       if (walletServiceError) {
         throw walletServiceError;
@@ -1318,7 +1407,7 @@ var PhantomClient = class {
     }
   }
   async getTransactionForSigning(params) {
-    const { encodedTransaction, networkId, submissionConfig, account } = params;
+    const { encodedTransaction, networkId, submissionConfig, account, authenticatorPublicKey } = params;
     const isEvmTransaction = isEthereumChain(networkId);
     const isSolanaTransaction = isSolanaChain(networkId);
     if (isEvmTransaction) {
@@ -1334,6 +1423,7 @@ var PhantomClient = class {
           this.config.organizationId,
           submissionConfig,
           account,
+          authenticatorPublicKey,
           params.methodName
         );
         return prepareResponse.transaction;
@@ -1357,7 +1447,7 @@ var PhantomClient = class {
   /**
    * Private method for shared signing logic
    */
-  async performTransactionSigning(params, includeSubmissionConfig) {
+  async performTransactionSigning(params, includeSubmissionConfig, presignTransaction) {
     const walletId = params.walletId;
     const encodedTransaction = params.transaction;
     const networkIdParam = params.networkId;
@@ -1380,13 +1470,25 @@ var PhantomClient = class {
         curve: networkConfig.curve,
         addressFormat: networkConfig.addressFormat
       };
-      const transactionForSigning = await this.getTransactionForSigning({
+      const authenticatorPublicKey = this.getAuthenticatorPublicKey();
+      let transactionForSigning = await this.getTransactionForSigning({
         encodedTransaction,
         networkId: networkIdParam,
         submissionConfig,
+        authenticatorPublicKey,
         account: params.account,
         methodName
       });
+      if (presignTransaction && typeof transactionForSigning === "string") {
+        try {
+          transactionForSigning = await presignTransaction(transactionForSigning, {
+            networkId: networkIdParam,
+            walletId
+          });
+        } catch (hookError) {
+          throw new Error(`presignTransaction hook failed: ${getErrorMessage(hookError, "unknown error")}`);
+        }
+      }
       const signRequest = {
         organizationId: this.config.organizationId,
         walletId,
@@ -1406,6 +1508,10 @@ var PhantomClient = class {
         params: signRequest,
         timestampMs: await getSecureTimestamp()
       };
+      this.logger?.debug(
+        `[TX_DEBUG] KMS request: methodName=${methodName} networkId=${networkIdParam} walletId=${walletId} account=${params.account}`
+      );
+      this.logger?.debug(`[TX_DEBUG] transactionForSigning=${JSON.stringify(transactionForSigning)}`);
       const response = await this.kmsApi.postKmsRpc(request, {
         headers: {
           "X-Rpc-Method": methodName
@@ -1413,7 +1519,29 @@ var PhantomClient = class {
       });
       const result = response.data.result;
       const rpcSubmissionResult = response.data["rpc_submission_result"];
-      const hash = includeSubmissionConfig && rpcSubmissionResult ? rpcSubmissionResult.result : null;
+      this.logger?.debug(
+        `[TX_DEBUG] KMS response: methodName=${methodName} hasResult=${!!result} rpcSubmissionResult=${JSON.stringify(rpcSubmissionResult)} fullResponse=${JSON.stringify(response.data)}`
+      );
+      let hash = void 0;
+      if (includeSubmissionConfig && rpcSubmissionResult) {
+        if (rpcSubmissionResult.error) {
+          const { error } = rpcSubmissionResult;
+          throw new Error(
+            `Transaction broadcast failed: ${error.data ?? error.message ?? JSON.stringify(rpcSubmissionResult)}`
+          );
+        }
+        const envelope = rpcSubmissionResult.result;
+        if (envelope != null) {
+          if (typeof envelope === "string") {
+            hash = envelope;
+          } else if (typeof envelope.result === "string") {
+            hash = envelope.result;
+          } else if (envelope.error) {
+            const { error } = envelope;
+            throw new Error(`Transaction broadcast failed: ${error.data ?? error.message ?? JSON.stringify(envelope)}`);
+          }
+        }
+      }
       return {
         signedTransaction: result.transaction,
         // Base64 encoded signed transaction
@@ -1424,6 +1552,11 @@ var PhantomClient = class {
       if (error instanceof WalletServiceError) {
         throw error;
       }
+      const axiosStatus = error.response?.status;
+      const axiosData = error.response?.data;
+      this.logger?.error(
+        `[TX_DEBUG] performTransactionSigning failed: methodName=${methodName} status=${axiosStatus} body=${JSON.stringify(axiosData)}`
+      );
       throw new Error(getErrorMessage(error, `Failed to ${actionType} transaction`));
     }
   }
@@ -1431,7 +1564,7 @@ var PhantomClient = class {
    * Sign a transaction
    */
   async signTransaction(params) {
-    const result = await this.performTransactionSigning(params, false);
+    const result = await this.performTransactionSigning(params, false, params.presignTransaction);
     return {
       rawTransaction: result.signedTransaction
     };
@@ -1440,7 +1573,7 @@ var PhantomClient = class {
    * Sign and send a transaction
    */
   async signAndSendTransaction(params) {
-    const result = await this.performTransactionSigning(params, true);
+    const result = await this.performTransactionSigning(params, true, params.presignTransaction);
     return {
       rawTransaction: result.signedTransaction,
       hash: result.hash
@@ -1472,7 +1605,7 @@ var PhantomClient = class {
       }));
       return addresses;
     } catch (error) {
-      console.error("Failed to get wallet addresses:", error.response?.data || error.message);
+      this.logger?.error(`Failed to get wallet addresses: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to get wallet addresses: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1512,7 +1645,7 @@ var PhantomClient = class {
       const result = response.data.result;
       return result.signature;
     } catch (error) {
-      console.error("Failed to sign Ethereum message:", error.response?.data || error.message);
+      this.logger?.error(`Failed to sign Ethereum message: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to sign Ethereum message: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1553,7 +1686,7 @@ var PhantomClient = class {
       const result = response.data.result;
       return result.signature;
     } catch (error) {
-      console.error("Failed to sign raw payload:", error.response?.data || error.message);
+      this.logger?.error(`Failed to sign raw payload: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to sign raw payload: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1592,7 +1725,7 @@ var PhantomClient = class {
       const result = response.data.result;
       return result.signature;
     } catch (error) {
-      console.error("Failed to sign typed data:", error.response?.data || error.message);
+      this.logger?.error(`Failed to sign typed data: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to sign typed data: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1619,7 +1752,7 @@ var PhantomClient = class {
         offset: result.offset
       };
     } catch (error) {
-      console.error("Failed to get wallets:", error.response?.data || error.message);
+      this.logger?.error(`Failed to get wallets: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to get wallets: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1639,7 +1772,7 @@ var PhantomClient = class {
       const result = response.data.result;
       return result;
     } catch (error) {
-      console.error("Failed to get organization:", error.response?.data || error.message);
+      this.logger?.error(`Failed to get organization: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to get organization: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1693,7 +1826,7 @@ var PhantomClient = class {
       const result = response.data.result;
       return result;
     } catch (error) {
-      console.error("Failed to create organization:", error.response?.data || error.message);
+      this.logger?.error(`Failed to create organization: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to create organization: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1727,7 +1860,7 @@ var PhantomClient = class {
       const result = response.data.result;
       return result;
     } catch (error) {
-      console.error("Failed to create authenticator:", error.response?.data || error.message);
+      this.logger?.error(`Failed to create authenticator: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to create authenticator: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1750,7 +1883,7 @@ var PhantomClient = class {
       const result = response.data.result;
       return result;
     } catch (error) {
-      console.error("Failed to delete authenticator:", error.response?.data || error.message);
+      this.logger?.error(`Failed to delete authenticator: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to delete authenticator: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1765,7 +1898,9 @@ var PhantomClient = class {
       const result = response.data.result;
       return result;
     } catch (error) {
-      console.error("Failed to grant organization access:", error.response?.data || error.message);
+      this.logger?.error(
+        `Failed to grant organization access: ${JSON.stringify(error.response?.data) || error.message}`
+      );
       throw new Error(`Failed to grant organization access: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1781,7 +1916,9 @@ var PhantomClient = class {
       };
       await this.kmsApi.postKmsRpc(request);
     } catch (error) {
-      console.error("Failed to add user to organization:", error.response?.data || error.message);
+      this.logger?.error(
+        `Failed to add user to organization: ${JSON.stringify(error.response?.data) || error.message}`
+      );
       throw new Error(`Failed to add user to organization: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1803,7 +1940,7 @@ var PhantomClient = class {
       const result = response.data.result;
       return result;
     } catch (error) {
-      console.error("Failed to get wallet with tag:", error.response?.data || error.message);
+      this.logger?.error(`Failed to get wallet with tag: ${JSON.stringify(error.response?.data) || error.message}`);
       throw new Error(`Failed to get wallet with tag: ${error.response?.data?.message || error.message}`);
     }
   }
@@ -1836,6 +1973,22 @@ var __privateMethod = (obj, member, method) => {
   return method;
 };
 
+// src/extension/isInstalled.ts
+function isInstalled() {
+  try {
+    const phantom = window?.phantom;
+    return !!phantom;
+  } catch (error) {
+    return false;
+  }
+}
+
+// src/errors.ts
+var PHANTOM_NOT_DETECTED = "Phantom wallet not detected.";
+var ETHEREUM_PROVIDER_NOT_FOUND = "Ethereum provider not found on window.phantom.";
+var SOLANA_PROVIDER_NOT_FOUND = "Solana provider not found on window.phantom.";
+var APP_PROVIDER_NOT_FOUND = "App provider not found on window.phantom.";
+
 // src/ethereum/siwe.ts
 var ADDRESS_REGEX = /^0x[a-fA-F0-9]{40}$/;
 var DOMAIN_REGEX = /^([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}(:[0-9]{1,5})?$/;
@@ -1960,7 +2113,7 @@ function splitUri(value) {
 }
 
 // src/ethereum/strategies/injected.ts
-var MAX_RETRIES$1 = 4;
+var MAX_RETRIES$1 = 6;
 var BASE_DELAY$1 = 100;
 var _getProvider$1, getProvider_fn$1;
 var InjectedEthereumStrategy = class {
@@ -1979,7 +2132,11 @@ var InjectedEthereumStrategy = class {
         }
         retryCount++;
         if (retryCount >= MAX_RETRIES$1) {
-          reject();
+          if (!isInstalled()) {
+            reject(new Error(PHANTOM_NOT_DETECTED));
+          } else {
+            reject(new Error(ETHEREUM_PROVIDER_NOT_FOUND));
+          }
         } else {
           scheduleRetry(resolve, reject);
         }
@@ -1999,7 +2156,7 @@ var InjectedEthereumStrategy = class {
   async connect({ onlyIfTrusted }) {
     const provider = __privateMethod(this, _getProvider$1, getProvider_fn$1).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(ETHEREUM_PROVIDER_NOT_FOUND);
     }
     if (provider.isConnected && provider.selectedAddress) {
       return this.getAccounts();
@@ -2031,7 +2188,7 @@ var InjectedEthereumStrategy = class {
   async signMessage(message, address) {
     const provider = __privateMethod(this, _getProvider$1, getProvider_fn$1).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(ETHEREUM_PROVIDER_NOT_FOUND);
     }
     if (!provider.isConnected) {
       throw new Error("Provider is not connected.");
@@ -2045,7 +2202,7 @@ var InjectedEthereumStrategy = class {
   async signPersonalMessage(message, address) {
     const provider = __privateMethod(this, _getProvider$1, getProvider_fn$1).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(ETHEREUM_PROVIDER_NOT_FOUND);
     }
     if (!provider.isConnected) {
       throw new Error("Provider is not connected.");
@@ -2059,7 +2216,7 @@ var InjectedEthereumStrategy = class {
   async signTypedData(typedData, address) {
     const provider = __privateMethod(this, _getProvider$1, getProvider_fn$1).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(ETHEREUM_PROVIDER_NOT_FOUND);
     }
     if (!provider.isConnected) {
       throw new Error("Provider is not connected.");
@@ -2073,7 +2230,7 @@ var InjectedEthereumStrategy = class {
   async signIn(signInData) {
     const provider = __privateMethod(this, _getProvider$1, getProvider_fn$1).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(ETHEREUM_PROVIDER_NOT_FOUND);
     }
     const message = createSiweMessage(signInData);
     const address = provider.selectedAddress;
@@ -2090,7 +2247,7 @@ var InjectedEthereumStrategy = class {
   async sendTransaction(transaction) {
     const provider = __privateMethod(this, _getProvider$1, getProvider_fn$1).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(ETHEREUM_PROVIDER_NOT_FOUND);
     }
     if (!provider.isConnected) {
       throw new Error("Provider is not connected.");
@@ -2104,7 +2261,7 @@ var InjectedEthereumStrategy = class {
   async signTransaction(transaction) {
     const provider = __privateMethod(this, _getProvider$1, getProvider_fn$1).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(ETHEREUM_PROVIDER_NOT_FOUND);
     }
     if (!provider.isConnected) {
       throw new Error("Provider is not connected.");
@@ -2118,7 +2275,7 @@ var InjectedEthereumStrategy = class {
   async getChainId() {
     const provider = __privateMethod(this, _getProvider$1, getProvider_fn$1).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(ETHEREUM_PROVIDER_NOT_FOUND);
     }
     const chainId = await provider.request({ method: "eth_chainId" });
     return chainId;
@@ -2126,7 +2283,7 @@ var InjectedEthereumStrategy = class {
   async switchChain(chainId) {
     const provider = __privateMethod(this, _getProvider$1, getProvider_fn$1).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(ETHEREUM_PROVIDER_NOT_FOUND);
     }
     await provider.request({
       method: "wallet_switchEthereumChain",
@@ -2136,29 +2293,25 @@ var InjectedEthereumStrategy = class {
   async request(args) {
     const provider = __privateMethod(this, _getProvider$1, getProvider_fn$1).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(ETHEREUM_PROVIDER_NOT_FOUND);
     }
     return await provider.request(args);
   }
 };
 _getProvider$1 = new WeakSet();
 getProvider_fn$1 = function() {
-  if (typeof window === "undefined") {
+  if (!isInstalled()) {
     return void 0;
   }
-  return window?.phantom?.ethereum;
+  return window.phantom.ethereum;
 };
 
 // src/ethereum/getProvider.ts
 async function getProvider$2(strategy = "injected" /* INJECTED */) {
   if (strategy === "injected") {
     const provider = new InjectedEthereumStrategy();
-    try {
-      await provider.load();
-      return provider;
-    } catch (error) {
-      throw new Error("Provider not found.");
-    }
+    await provider.load();
+    return provider;
   } else {
     throw new Error("Invalid provider type.");
   }
@@ -2196,9 +2349,6 @@ function triggerEvent$1(event, data) {
 // src/ethereum/connect.ts
 async function connect$1({ onlyIfTrusted = false } = {}) {
   const provider = await getProvider$2();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (provider.isConnected) {
     const accounts = await provider.getAccounts();
     return accounts;
@@ -2228,9 +2378,6 @@ async function connect$1({ onlyIfTrusted = false } = {}) {
 // src/ethereum/disconnect.ts
 async function disconnect$1() {
   const provider = await getProvider$2();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   await provider.disconnect();
   triggerEvent$1("disconnect", []);
 }
@@ -2238,18 +2385,12 @@ async function disconnect$1() {
 // src/ethereum/getAccounts.ts
 async function getAccounts() {
   const provider = await getProvider$2();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   return provider.getAccounts();
 }
 
 // src/ethereum/signMessage.ts
 async function signPersonalMessage(message, address) {
   const provider = await getProvider$2();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (!provider.isConnected) {
     await provider.connect({ onlyIfTrusted: false });
   }
@@ -2257,9 +2398,6 @@ async function signPersonalMessage(message, address) {
 }
 async function signTypedData(typedData, address) {
   const provider = await getProvider$2();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (!provider.isConnected) {
     await provider.connect({ onlyIfTrusted: false });
   }
@@ -2269,9 +2407,6 @@ async function signTypedData(typedData, address) {
 // src/ethereum/sendTransaction.ts
 async function sendTransaction(transaction) {
   const provider = await getProvider$2();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (!provider.isConnected) {
     await provider.connect({ onlyIfTrusted: false });
   }
@@ -2279,9 +2414,6 @@ async function sendTransaction(transaction) {
 }
 async function signTransaction$1(transaction) {
   const provider = await getProvider$2();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (!provider.isConnected) {
     await provider.connect({ onlyIfTrusted: false });
   }
@@ -2291,16 +2423,10 @@ async function signTransaction$1(transaction) {
 // src/ethereum/chainUtils.ts
 async function getChainId() {
   const provider = await getProvider$2();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   return provider.getChainId();
 }
 async function switchChain(chainId) {
   const provider = await getProvider$2();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   return provider.switchChain(chainId);
 }
 
@@ -2311,9 +2437,6 @@ var Ethereum = class {
     this._accounts = [];
     this.bindProviderEvents();
   }
-  get connected() {
-    return this._accounts.length > 0;
-  }
   get chainId() {
     return this._chainId;
   }
@@ -2322,9 +2445,6 @@ var Ethereum = class {
   }
   async request(args) {
     const provider = await getProvider$2();
-    if (!provider) {
-      throw new Error("Provider not found.");
-    }
     const providerInstance = provider.getProvider();
     if (!providerInstance) {
       throw new Error("Provider instance not found.");
@@ -2425,16 +2545,6 @@ function createEthereumPlugin() {
   };
 }
 
-// src/extension/isInstalled.ts
-function isInstalled() {
-  try {
-    const phantom = window?.phantom;
-    return !!phantom;
-  } catch (error) {
-    return false;
-  }
-}
-
 // src/extension/plugin.ts
 var extension = {
   isInstalled
@@ -2456,7 +2566,7 @@ function createPhantom({ plugins = [] }) {
 }
 
 // src/solana/strategies/injected.ts
-var MAX_RETRIES = 4;
+var MAX_RETRIES = 6;
 var BASE_DELAY = 100;
 var _getProvider, getProvider_fn;
 var InjectedSolanaStrategy = class {
@@ -2475,7 +2585,11 @@ var InjectedSolanaStrategy = class {
         }
         retryCount++;
         if (retryCount >= MAX_RETRIES) {
-          reject();
+          if (!isInstalled()) {
+            reject(new Error(PHANTOM_NOT_DETECTED));
+          } else {
+            reject(new Error(SOLANA_PROVIDER_NOT_FOUND));
+          }
         } else {
           scheduleRetry(resolve, reject);
         }
@@ -2495,7 +2609,7 @@ var InjectedSolanaStrategy = class {
   async connect({ onlyIfTrusted }) {
     const provider = __privateMethod(this, _getProvider, getProvider_fn).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(SOLANA_PROVIDER_NOT_FOUND);
     }
     if (provider.isConnected && provider.publicKey) {
       return this.getAccount() ?? void 0;
@@ -2510,7 +2624,7 @@ var InjectedSolanaStrategy = class {
   async disconnect() {
     const provider = __privateMethod(this, _getProvider, getProvider_fn).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(SOLANA_PROVIDER_NOT_FOUND);
     }
     await provider.disconnect();
   }
@@ -2524,7 +2638,7 @@ var InjectedSolanaStrategy = class {
   async signMessage(message, display) {
     const provider = __privateMethod(this, _getProvider, getProvider_fn).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(SOLANA_PROVIDER_NOT_FOUND);
     }
     if (!provider.isConnected) {
       throw new Error("Provider is not connected.");
@@ -2538,7 +2652,7 @@ var InjectedSolanaStrategy = class {
   async signIn(signInData) {
     const provider = __privateMethod(this, _getProvider, getProvider_fn).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(SOLANA_PROVIDER_NOT_FOUND);
     }
     const result = await provider.signIn(signInData);
     return {
@@ -2550,7 +2664,7 @@ var InjectedSolanaStrategy = class {
   async signAndSendTransaction(transaction) {
     const provider = __privateMethod(this, _getProvider, getProvider_fn).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(SOLANA_PROVIDER_NOT_FOUND);
     }
     if (!provider.isConnected) {
       throw new Error("Provider is not connected.");
@@ -2564,7 +2678,7 @@ var InjectedSolanaStrategy = class {
   async signAndSendAllTransactions(transactions) {
     const provider = __privateMethod(this, _getProvider, getProvider_fn).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(SOLANA_PROVIDER_NOT_FOUND);
     }
     if (!provider.isConnected) {
       throw new Error("Provider is not connected.");
@@ -2581,7 +2695,7 @@ var InjectedSolanaStrategy = class {
   async signTransaction(transaction) {
     const provider = __privateMethod(this, _getProvider, getProvider_fn).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(SOLANA_PROVIDER_NOT_FOUND);
     }
     if (!provider.isConnected) {
       throw new Error("Provider is not connected.");
@@ -2592,7 +2706,7 @@ var InjectedSolanaStrategy = class {
   async signAllTransactions(transactions) {
     const provider = __privateMethod(this, _getProvider, getProvider_fn).call(this);
     if (!provider) {
-      throw new Error("Provider not found.");
+      throw new Error(SOLANA_PROVIDER_NOT_FOUND);
     }
     if (!provider.isConnected) {
       throw new Error("Provider is not connected.");
@@ -2603,22 +2717,18 @@ var InjectedSolanaStrategy = class {
 };
 _getProvider = new WeakSet();
 getProvider_fn = function() {
-  if (typeof window === "undefined") {
+  if (!isInstalled()) {
     return void 0;
   }
-  return window?.phantom?.solana;
+  return window.phantom.solana;
 };
 
 // src/solana/getProvider.ts
 async function getProvider$1(strategy = "injected" /* INJECTED */) {
   if (strategy === "injected") {
     const provider = new InjectedSolanaStrategy();
-    try {
-      await provider.load();
-      return provider;
-    } catch (error) {
-      throw new Error("Provider not found.");
-    }
+    await provider.load();
+    return provider;
   } else {
     throw new Error("Invalid provider type.");
   }
@@ -2658,9 +2768,6 @@ function triggerEvent(event, ...args) {
 // src/solana/connect.ts
 async function connect({ onlyIfTrusted = false } = {}) {
   const provider = await getProvider$1();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (provider.isConnected) {
     return provider.getAccount();
   }
@@ -2689,25 +2796,13 @@ async function connect({ onlyIfTrusted = false } = {}) {
 // src/solana/disconnect.ts
 async function disconnect() {
   const provider = await getProvider$1();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   await provider.disconnect();
   triggerEvent("disconnect");
 }
 
-// src/solana/getAccount.ts
-async function getAccount() {
-  const provider = await getProvider$1();
-  return provider.getAccount();
-}
-
 // src/solana/signAndSendTransaction.ts
 async function signAndSendTransaction(transaction) {
   const provider = await getProvider$1();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (!provider.isConnected) {
     await provider.connect({ onlyIfTrusted: false });
   }
@@ -2717,9 +2812,6 @@ async function signAndSendTransaction(transaction) {
 // src/solana/signAndSendAllTransactions.ts
 async function signAndSendAllTransactions(transactions) {
   const provider = await getProvider$1();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (!provider.isConnected) {
     await provider.connect({ onlyIfTrusted: false });
   }
@@ -2729,9 +2821,6 @@ async function signAndSendAllTransactions(transactions) {
 // src/solana/signTransaction.ts
 async function signTransaction(transaction) {
   const provider = await getProvider$1();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (!provider.isConnected) {
     await provider.connect({ onlyIfTrusted: false });
   }
@@ -2741,9 +2830,6 @@ async function signTransaction(transaction) {
 // src/solana/signAllTransactions.ts
 async function signAllTransactions(transactions) {
   const provider = await getProvider$1();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (!provider.isConnected) {
     await provider.connect({ onlyIfTrusted: false });
   }
@@ -2753,9 +2839,6 @@ async function signAllTransactions(transactions) {
 // src/solana/signMessage.ts
 async function signMessage(message, display) {
   const provider = await getProvider$1();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
   if (!provider.isConnected) {
     await provider.connect({ onlyIfTrusted: false });
   }
@@ -2771,7 +2854,7 @@ var Solana = class {
   get publicKey() {
     return this._publicKey;
   }
-  get connected() {
+  get isConnected() {
     return this._publicKey !== null;
   }
   async connect(options) {
@@ -2811,21 +2894,6 @@ var Solana = class {
   async switchNetwork(_network) {
     return Promise.resolve();
   }
-  async getPublicKey() {
-    if (this._publicKey) {
-      return this._publicKey;
-    }
-    try {
-      const account = await getAccount();
-      this._publicKey = account || null;
-      return this._publicKey;
-    } catch {
-      return null;
-    }
-  }
-  isConnected() {
-    return this._publicKey !== null;
-  }
   on(event, listener) {
     addEventListener(event, listener);
   }
@@ -2875,20 +2943,17 @@ function createSolanaPlugin() {
 
 // src/auto-confirm/getProvider.ts
 function getProvider() {
-  if (typeof window === "undefined") {
-    return null;
+  if (!isInstalled()) {
+    throw new Error(PHANTOM_NOT_DETECTED);
   }
-  const provider = window?.phantom?.app;
+  const provider = window.phantom.app;
   if (!provider) {
-    return null;
+    throw new Error(APP_PROVIDER_NOT_FOUND);
   }
   return provider;
 }
 async function autoConfirmEnable(params) {
-  const provider = await getProvider();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
+  const provider = getProvider();
   const transformedParams = params?.chains ? { chains: params.chains.map(networkIdToInternalCaip) } : {};
   const result = await provider.request({
     method: "phantom_auto_confirm_enable",
@@ -2900,10 +2965,7 @@ async function autoConfirmEnable(params) {
   };
 }
 async function autoConfirmDisable() {
-  const provider = await getProvider();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
+  const provider = getProvider();
   const result = await provider.request({
     method: "phantom_auto_confirm_disable",
     params: {}
@@ -2914,10 +2976,7 @@ async function autoConfirmDisable() {
   };
 }
 async function autoConfirmStatus() {
-  const provider = await getProvider();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
+  const provider = getProvider();
   const result = await provider.request({
     method: "phantom_auto_confirm_status",
     params: {}
@@ -2928,10 +2987,7 @@ async function autoConfirmStatus() {
   };
 }
 async function autoConfirmSupportedChains() {
-  const provider = await getProvider();
-  if (!provider) {
-    throw new Error("Provider not found.");
-  }
+  const provider = getProvider();
   const result = await provider.request({
     method: "phantom_auto_confirm_supported_chains",
     params: {}
@@ -3352,7 +3408,7 @@ function stringToBase64url(str) {
 /**
  *  The current version of Ethers.
  */
-const version = "6.16.0";
+const version = "6.17.0";
 
 /**
  *  Property helper functions.
@@ -8678,7 +8734,7 @@ function parseTransactionResponse(base64RawTransaction, networkId, hash) {
 function parseSolanaSignatureResponse(base64Response) {
   try {
     const signatureBytes = base64urlDecode(base64Response);
-    const signature = base58.encode(signatureBytes);
+    const signature = bs582.encode(signatureBytes);
     return {
       signature,
       rawSignature: base64Response
@@ -8748,8 +8804,6 @@ function deserializeSolanaTransaction(transactionBytes) {
     throw legacyError;
   }
 }
-
-// src/index.ts
 async function parseToKmsTransaction(transaction, networkId) {
   const networkPrefix = networkId.split(":")[0].toLowerCase();
   switch (networkPrefix) {
@@ -9271,27 +9325,25 @@ var EventEmitter2 = /*@__PURE__*/getDefaultExportFromCjs(eventemitter3Exports);
 // src/embedded-provider.ts
 
 // src/constants.ts
-var AUTHENTICATOR_EXPIRATION_TIME_MS = 7 * 24 * 60 * 60 * 1e3;
+var AUTHENTICATOR_EXPIRATION_TIME_MS = 31 * 24 * 60 * 60 * 1e3;
 var EMBEDDED_PROVIDER_AUTH_TYPES = ["google", "apple", "phantom"];
 var EmbeddedSolanaChain = class {
   constructor(provider) {
     this.provider = provider;
     this.currentNetworkId = NetworkId.SOLANA_MAINNET;
-    this._connected = false;
     this._publicKey = null;
     this.eventEmitter = new EventEmitter2();
     this.setupEventListeners();
     this.syncInitialState();
   }
-  // Wallet adapter compliant properties
-  get connected() {
-    return this._connected;
-  }
   get publicKey() {
     return this._publicKey;
   }
+  get isConnected() {
+    return this._publicKey !== null;
+  }
   ensureConnected() {
-    if (!this.provider.isConnected()) {
+    if (!this.isConnected) {
       throw new Error("Solana chain not available. Ensure SDK is connected.");
     }
   }
@@ -9303,7 +9355,7 @@ var EmbeddedSolanaChain = class {
       message: messageStr,
       networkId: this.currentNetworkId
     });
-    const signature = typeof result.signature === "string" ? new Uint8Array(base58.decode(result.signature)) : result.signature;
+    const signature = typeof result.signature === "string" ? new Uint8Array(bs582.decode(result.signature)) : result.signature;
     return {
       signature,
       publicKey: this._publicKey || ""
@@ -9321,11 +9373,12 @@ var EmbeddedSolanaChain = class {
     }
     return signedTransaction;
   }
-  async signAndSendTransaction(transaction) {
+  async signAndSendTransaction(transaction, options) {
     this.ensureConnected();
     const result = await this.provider.signAndSendTransaction({
       transaction,
-      networkId: this.currentNetworkId
+      networkId: this.currentNetworkId,
+      presignTransaction: options?.presignTransaction
     });
     if (!result.hash) {
       throw new Error("Transaction not submitted");
@@ -9349,7 +9402,7 @@ var EmbeddedSolanaChain = class {
     const solanaAddr = addresses.find((a) => a.addressType === "Solana");
     if (!solanaAddr)
       throw new Error("No Solana address found");
-    this.updateConnectionState(true, solanaAddr.address);
+    this._publicKey = solanaAddr.address;
     return Promise.resolve({ publicKey: solanaAddr.address });
   }
   async disconnect() {
@@ -9359,41 +9412,25 @@ var EmbeddedSolanaChain = class {
     this.currentNetworkId = network === "mainnet" ? NetworkId.SOLANA_MAINNET : NetworkId.SOLANA_DEVNET;
     return Promise.resolve();
   }
-  getPublicKey() {
-    if (!this.provider.isConnected())
-      return Promise.resolve(null);
-    const addresses = this.provider.getAddresses();
-    const solanaAddr = addresses.find((a) => a.addressType === "Solana");
-    return Promise.resolve(solanaAddr?.address || null);
-  }
-  isConnected() {
-    return this._connected && this.provider.isConnected();
-  }
   setupEventListeners() {
     this.provider.on("connect", (data) => {
       const solanaAddress = data.addresses?.find((addr) => addr.addressType === "Solana");
       if (solanaAddress) {
-        this.updateConnectionState(true, solanaAddress.address);
+        this._publicKey = solanaAddress.address;
         this.eventEmitter.emit("connect", solanaAddress.address);
       }
     });
     this.provider.on("disconnect", () => {
-      this.updateConnectionState(false, null);
+      this._publicKey = null;
       this.eventEmitter.emit("disconnect");
     });
   }
   syncInitialState() {
-    if (this.provider.isConnected()) {
-      const addresses = this.provider.getAddresses();
-      const solanaAddress = addresses.find((a) => a.addressType === "Solana");
-      if (solanaAddress) {
-        this.updateConnectionState(true, solanaAddress.address);
-      }
-    }
-  }
-  updateConnectionState(connected, publicKey) {
-    this._connected = connected;
-    this._publicKey = publicKey;
+    if (!this.provider.isConnected())
+      return;
+    const addresses = this.provider.getAddresses();
+    const solanaAddr = addresses.find((a) => a.addressType === "Solana");
+    this._publicKey = solanaAddr?.address || null;
   }
   // Event methods for interface compliance
   on(event, listener) {
@@ -9407,16 +9444,11 @@ var EmbeddedEthereumChain = class {
   constructor(provider) {
     this.provider = provider;
     this.currentNetworkId = NetworkId.ETHEREUM_MAINNET;
-    this._connected = false;
     this._accounts = [];
     this.eventEmitter = new EventEmitter2();
     this.setupEventListeners();
     this.syncInitialState();
   }
-  // EIP-1193 compliant properties
-  get connected() {
-    return this._connected;
-  }
   get chainId() {
     const chainId = networkIdToChainId(this.currentNetworkId) || 1;
     return `0x${chainId.toString(16)}`;
@@ -9440,7 +9472,7 @@ var EmbeddedEthereumChain = class {
     }
     const addresses = this.provider.getAddresses();
     const ethAddresses = addresses.filter((a) => a.addressType === "Ethereum").map((a) => a.address);
-    this.updateConnectionState(true, ethAddresses);
+    this.updateConnectionState(ethAddresses);
     return Promise.resolve(ethAddresses);
   }
   async disconnect() {
@@ -9506,19 +9538,19 @@ var EmbeddedEthereumChain = class {
     return this.request({ method: "eth_accounts" });
   }
   isConnected() {
-    return this._connected && this.provider.isConnected();
+    return this.provider.isConnected() && this._accounts.length > 0;
   }
   setupEventListeners() {
     this.provider.on("connect", (data) => {
       const ethAddresses = data.addresses?.filter((addr) => addr.addressType === "Ethereum")?.map((addr) => addr.address) || [];
       if (ethAddresses.length > 0) {
-        this.updateConnectionState(true, ethAddresses);
+        this.updateConnectionState(ethAddresses);
         this.eventEmitter.emit("connect", { chainId: this.chainId });
         this.eventEmitter.emit("accountsChanged", ethAddresses);
       }
     });
     this.provider.on("disconnect", () => {
-      this.updateConnectionState(false, []);
+      this.updateConnectionState([]);
       this.eventEmitter.emit("disconnect", { code: 4900, message: "Provider disconnected" });
       this.eventEmitter.emit("accountsChanged", []);
     });
@@ -9528,12 +9560,11 @@ var EmbeddedEthereumChain = class {
       const addresses = this.provider.getAddresses();
       const ethAddresses = addresses.filter((a) => a.addressType === "Ethereum").map((a) => a.address);
       if (ethAddresses.length > 0) {
-        this.updateConnectionState(true, ethAddresses);
+        this.updateConnectionState(ethAddresses);
       }
     }
   }
-  updateConnectionState(connected, accounts) {
-    this._connected = connected;
+  updateConnectionState(accounts) {
     this._accounts = accounts;
   }
   async handleEmbeddedRequest(args) {
@@ -9609,7 +9640,7 @@ async function retryWithBackoff(operation, operationName, logger, maxRetries = 3
   let lastError;
   for (let attempt = 1; attempt <= maxRetries; attempt++) {
     try {
-      logger.log("EMBEDDED_PROVIDER", `Attempting ${operationName}`, {
+      logger.debug("EMBEDDED_PROVIDER", `Attempting ${operationName}`, {
         attempt,
         maxRetries
       });
@@ -9628,7 +9659,7 @@ async function retryWithBackoff(operation, operationName, logger, maxRetries = 3
         break;
       }
       const delay = baseDelay * Math.pow(2, attempt - 1);
-      logger.log("EMBEDDED_PROVIDER", `Retrying ${operationName} in ${delay}ms`, {
+      logger.debug("EMBEDDED_PROVIDER", `Retrying ${operationName} in ${delay}ms`, {
         attempt: attempt + 1,
         delay
       });
@@ -9644,6 +9675,16 @@ function generateSessionId() {
 }
 
 // src/embedded-provider.ts
+var noopLogger = {
+  info: () => {
+  },
+  warn: () => {
+  },
+  error: () => {
+  },
+  debug: () => {
+  }
+};
 var EmbeddedProvider$1 = class EmbeddedProvider {
   constructor(config, platform, logger) {
     this.client = null;
@@ -9651,7 +9692,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
     this.addresses = [];
     this.eventListeners = /* @__PURE__ */ new Map();
     this.logger = logger;
-    this.logger.log("EMBEDDED_PROVIDER", "Initializing EmbeddedProvider", { config });
+    this.logger.debug("EMBEDDED_PROVIDER", "Initializing EmbeddedProvider", { config });
     if (config.embeddedWalletType === "app-wallet") {
       throw new Error("app-wallet type is not currently supported. Please use 'user-wallet' instead.");
     }
@@ -9674,19 +9715,19 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       this.eventListeners.set(event, /* @__PURE__ */ new Set());
     }
     this.eventListeners.get(event)?.add(callback);
-    this.logger.log("EMBEDDED_PROVIDER", "Event listener added", { event });
+    this.logger.debug("EMBEDDED_PROVIDER", "Event listener added", { event });
   }
   off(event, callback) {
     const listeners = this.eventListeners.get(event);
     if (listeners) {
       listeners.delete(callback);
-      this.logger.log("EMBEDDED_PROVIDER", "Event listener removed", { event });
+      this.logger.debug("EMBEDDED_PROVIDER", "Event listener removed", { event });
     }
   }
   emit(event, data) {
     const listeners = this.eventListeners.get(event);
     if (listeners && listeners.size > 0) {
-      this.logger.log("EMBEDDED_PROVIDER", "Emitting event", { event, listenerCount: listeners.size, data });
+      this.logger.debug("EMBEDDED_PROVIDER", "Emitting event", { event, listenerCount: listeners.size, data });
       listeners.forEach((callback) => {
         try {
           callback(data);
@@ -9754,14 +9795,15 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
   async validateAndCleanSession(session) {
     if (!session)
       return null;
-    this.logger.log("EMBEDDED_PROVIDER", "Found existing session, validating", {
+    this.logger.debug("EMBEDDED_PROVIDER", "Found existing session, validating", {
       sessionId: session.sessionId,
       status: session.status,
       walletId: session.walletId
     });
     if (session.status !== "completed") {
       const urlSessionId = this.urlParamsAccessor.getParam("session_id");
-      if (session.status === "pending" && !urlSessionId) {
+      const urlCode = this.urlParamsAccessor.getParam("code");
+      if (session.status === "pending" && !urlSessionId && !urlCode) {
         this.logger.warn("EMBEDDED_PROVIDER", "Session mismatch detected - pending session without redirect context", {
           sessionId: session.sessionId,
           status: session.status
@@ -9799,11 +9841,11 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
    * Returns ConnectResult if connection succeeds, null if should continue with new auth flow.
    */
   async tryExistingConnection(isAutoConnect) {
-    this.logger.log("EMBEDDED_PROVIDER", "Getting existing session");
+    this.logger.debug("EMBEDDED_PROVIDER", "Getting existing session");
     let session = await this.storage.getSession();
     session = await this.validateAndCleanSession(session);
     if (!session) {
-      this.logger.log("EMBEDDED_PROVIDER", "No existing session found");
+      this.logger.debug("EMBEDDED_PROVIDER", "No existing session found");
       return null;
     }
     if (session.status === "completed") {
@@ -9832,9 +9874,9 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       });
       return result;
     }
-    this.logger.log("EMBEDDED_PROVIDER", "No completed session found, checking for redirect resume");
+    this.logger.debug("EMBEDDED_PROVIDER", "No completed session found, checking for redirect resume");
     if (this.authProvider.resumeAuthFromRedirect) {
-      const authResult = this.authProvider.resumeAuthFromRedirect(session.authProvider);
+      const authResult = await this.authProvider.resumeAuthFromRedirect(session.authProvider);
       if (authResult) {
         this.logger.info("EMBEDDED_PROVIDER", "Resuming from redirect", {
           walletId: authResult.walletId,
@@ -9882,7 +9924,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       return false;
     }
     if (!session.walletId || !session.organizationId || !session.stamperInfo) {
-      this.logger.log("EMBEDDED_PROVIDER", "Session missing required fields", {
+      this.logger.debug("EMBEDDED_PROVIDER", "Session missing required fields", {
         hasWalletId: !!session.walletId,
         hasOrganizationId: !!session.organizationId,
         hasStamperInfo: !!session.stamperInfo
@@ -9890,23 +9932,23 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       return false;
     }
     if (session.status !== "completed") {
-      this.logger.log("EMBEDDED_PROVIDER", "Session not completed", { status: session.status });
+      this.logger.debug("EMBEDDED_PROVIDER", "Session not completed", { status: session.status });
       return false;
     }
     if (!session.authenticatorExpiresAt) {
-      this.logger.log("EMBEDDED_PROVIDER", "Session invalid - missing authenticator timing", {
+      this.logger.debug("EMBEDDED_PROVIDER", "Session invalid - missing authenticator timing", {
         sessionId: session.sessionId
       });
       return false;
     }
     if (Date.now() >= session.authenticatorExpiresAt) {
-      this.logger.log("EMBEDDED_PROVIDER", "Authenticator expired, session invalid", {
+      this.logger.debug("EMBEDDED_PROVIDER", "Authenticator expired, session invalid", {
         authenticatorExpiresAt: new Date(session.authenticatorExpiresAt).toISOString(),
         now: (/* @__PURE__ */ new Date()).toISOString()
       });
       return false;
     }
-    this.logger.log("EMBEDDED_PROVIDER", "Session is valid", {
+    this.logger.debug("EMBEDDED_PROVIDER", "Session is valid", {
       sessionId: session.sessionId,
       walletId: session.walletId,
       authenticatorExpires: new Date(session.authenticatorExpiresAt).toISOString()
@@ -9920,7 +9962,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
    */
   async autoConnect() {
     try {
-      this.logger.log("EMBEDDED_PROVIDER", "Starting auto-connect attempt");
+      this.logger.debug("EMBEDDED_PROVIDER", "Starting auto-connect attempt");
       this.emit("connect_start", { source: "auto-connect" });
       const result = await this.tryExistingConnection(true);
       if (result) {
@@ -9934,7 +9976,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
         });
         return;
       }
-      this.logger.log("EMBEDDED_PROVIDER", "Auto-connect failed: no valid session found");
+      this.logger.debug("EMBEDDED_PROVIDER", "Auto-connect failed: no valid session found");
       this.emit("connect_error", {
         error: "No valid session found",
         source: "auto-connect"
@@ -9955,11 +9997,11 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
    * This is the first step when no existing session is found and we need to set up a new wallet.
    */
   async initializeStamper() {
-    this.logger.log("EMBEDDED_PROVIDER", "Initializing stamper");
+    this.logger.debug("EMBEDDED_PROVIDER", "Initializing stamper");
     await this.stamper.init();
-    this.logger.log("EMBEDDED_PROVIDER", "Resetting keypair to avoid conflicts with existing keypairs");
+    this.logger.debug("EMBEDDED_PROVIDER", "Resetting keypair to avoid conflicts with existing keypairs");
     const stamperInfo = await this.stamper.resetKeyPair();
-    this.logger.log("EMBEDDED_PROVIDER", "Stamper initialized with fresh keypair", {
+    this.logger.debug("EMBEDDED_PROVIDER", "Stamper initialized with fresh keypair", {
       publicKey: stamperInfo.publicKey,
       keyId: stamperInfo.keyId,
       algorithm: this.stamper.algorithm
@@ -9976,17 +10018,18 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       apiBaseUrl: this.config.apiBaseUrl,
       headers: {
         ...this.platform.analyticsHeaders || {}
-      }
+      },
+      logger: noopLogger
     });
     const platformName = this.platform.name || "unknown";
     const shortPubKey = stamperInfo.publicKey.slice(0, 8);
     const organizationName = `${this.config.appId.substring(0, 8)}-${platformName}-${shortPubKey}`;
-    this.logger.log("EMBEDDED_PROVIDER", "Creating organization for app-wallet", {
+    this.logger.debug("EMBEDDED_PROVIDER", "Creating organization for app-wallet", {
       organizationName,
       publicKey: stamperInfo.publicKey,
       platform: platformName
     });
-    const base64urlPublicKey = base64urlEncode(base58.decode(stamperInfo.publicKey));
+    const base64urlPublicKey = base64urlEncode(bs582.decode(stamperInfo.publicKey));
     const username = `user-${randomUUID()}`;
     const { organizationId } = await tempClient.createOrganization(organizationName, [
       {
@@ -9997,7 +10040,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
             authenticatorName: `auth-${shortPubKey}`,
             authenticatorKind: "keypair",
             publicKey: base64urlPublicKey,
-            algorithm: "Ed25519",
+            algorithm: this.stamper.algorithm,
             expiresInMs
           }
         ]
@@ -10101,7 +10144,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
   async disconnect(shouldClearPreviousSession = true) {
     const wasConnected = this.client !== null;
     await this.storage.setShouldClearPreviousSession(shouldClearPreviousSession);
-    this.logger.log("EMBEDDED_PROVIDER", "Set flag to clear previous session on next login");
+    this.logger.debug("EMBEDDED_PROVIDER", "Set flag to clear previous session on next login");
     await this.storage.clearSession();
     this.client = null;
     this.walletId = null;
@@ -10113,6 +10156,21 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       });
     }
   }
+  /**
+   * Handles errors from signing operations.
+   * Disconnects the user if the server returns a 401/403 (revoked or expired authenticator).
+   */
+  async handleSigningError(error) {
+    if (isAuthenticationError(error)) {
+      this.logger.warn("EMBEDDED_PROVIDER", "Authenticator rejected by server (401/403), disconnecting", { error });
+      await this.disconnect(false);
+      throw new Error("Authenticator revoked");
+    }
+    if (error instanceof SpendingLimitError) {
+      this.emit("spending_limit_reached", { error });
+    }
+    throw error;
+  }
   async signMessage(params) {
     if (!this.client || !this.walletId) {
       throw new Error("Not connected");
@@ -10129,7 +10187,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       message: params.message,
       networkId: params.networkId,
       derivationIndex
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Message signed successfully", {
       walletId: this.walletId,
       message: params.message
@@ -10162,7 +10220,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       message: base64UrlMessage,
       networkId: params.networkId,
       derivationIndex
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Message signed successfully", {
       walletId: this.walletId,
       message: params.message
@@ -10185,7 +10243,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       typedData: params.typedData,
       networkId: params.networkId,
       derivationIndex
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Typed data signed successfully", {
       walletId: this.walletId
     });
@@ -10203,7 +10261,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
     const parsedTransaction = await parseToKmsTransaction(params.transaction, params.networkId);
     const session = await this.storage.getSession();
     const derivationIndex = session?.accountDerivationIndex ?? 0;
-    this.logger.log("EMBEDDED_PROVIDER", "Parsed transaction for signing", {
+    this.logger.debug("EMBEDDED_PROVIDER", "Parsed transaction for signing", {
       walletId: this.walletId,
       transaction: parsedTransaction,
       derivationIndex
@@ -10222,7 +10280,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       networkId: params.networkId,
       derivationIndex,
       account
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Transaction signed successfully", {
       walletId: this.walletId,
       networkId: params.networkId,
@@ -10242,7 +10300,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
     const parsedTransaction = await parseToKmsTransaction(params.transaction, params.networkId);
     const session = await this.storage.getSession();
     const derivationIndex = session?.accountDerivationIndex ?? 0;
-    this.logger.log("EMBEDDED_PROVIDER", "Parsed transaction for signing", {
+    this.logger.debug("EMBEDDED_PROVIDER", "Parsed transaction for signing", {
       walletId: this.walletId,
       transaction: parsedTransaction,
       derivationIndex
@@ -10255,21 +10313,14 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
     if (!account) {
       throw new Error(`No address found for network ${params.networkId}`);
     }
-    let rawResponse;
-    try {
-      rawResponse = await this.client.signAndSendTransaction({
-        walletId: this.walletId,
-        transaction: transactionPayload,
-        networkId: params.networkId,
-        derivationIndex,
-        account
-      });
-    } catch (error) {
-      if (error instanceof SpendingLimitError) {
-        this.emit("spending_limit_reached", { error });
-      }
-      throw error;
-    }
+    const rawResponse = await this.client.signAndSendTransaction({
+      walletId: this.walletId,
+      transaction: transactionPayload,
+      networkId: params.networkId,
+      derivationIndex,
+      account,
+      presignTransaction: params.presignTransaction
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Transaction signed and sent successfully", {
       walletId: this.walletId,
       networkId: params.networkId,
@@ -10314,7 +10365,8 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
           organizationId,
           headers: {
             ...this.platform.analyticsHeaders || {}
-          }
+          },
+          logger: noopLogger
         },
         this.stamper
       );
@@ -10393,7 +10445,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       lastRenewalAttempt: void 0,
       authUserId: authResult.authUserId
     };
-    this.logger.log("EMBEDDED_PROVIDER", "Saving Phantom session");
+    this.logger.debug("EMBEDDED_PROVIDER", "Saving Phantom session");
     await this.storage.saveSession(session);
     return session;
   }
@@ -10428,7 +10480,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       authenticatorExpiresAt: now + AUTHENTICATOR_EXPIRATION_TIME_MS,
       lastRenewalAttempt: void 0
     };
-    this.logger.log("EMBEDDED_PROVIDER", "Saving temporary session before redirect", {
+    this.logger.debug("EMBEDDED_PROVIDER", "Saving temporary session before redirect", {
       sessionId: tempSession.sessionId,
       tempWalletId: tempSession.walletId
     });
@@ -10453,8 +10505,9 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       // OAuth session management - defaults to allowing refresh unless user explicitly logged out
       clearPreviousSession: shouldClearPreviousSession,
       // true only after logout
-      allowRefresh: !shouldClearPreviousSession
+      allowRefresh: !shouldClearPreviousSession,
       // false only after logout
+      algorithm: this.stamper.algorithm
     });
     if (authResult && "walletId" in authResult) {
       this.logger.info("EMBEDDED_PROVIDER", "Authentication completed after redirect", {
@@ -10467,20 +10520,21 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       tempSession.authProvider = authResult.provider || tempSession.authProvider;
       tempSession.accountDerivationIndex = authResult.accountDerivationIndex;
       tempSession.authUserId = authResult.authUserId;
+      tempSession.bearerToken = authResult.bearerToken;
       tempSession.status = "completed";
       tempSession.lastUsed = Date.now();
       if (authResult.expiresInMs > 0) {
         const now2 = Date.now();
         tempSession.authenticatorCreatedAt = now2;
         tempSession.authenticatorExpiresAt = now2 + authResult.expiresInMs;
-        this.logger.log("EMBEDDED_PROVIDER", "Updated authenticator expiration from immediate auth response", {
+        this.logger.debug("EMBEDDED_PROVIDER", "Updated authenticator expiration from immediate auth response", {
           expiresInMs: authResult.expiresInMs,
           expiresAt: new Date(tempSession.authenticatorExpiresAt).toISOString()
         });
       }
       await this.storage.saveSession(tempSession);
       await this.storage.setShouldClearPreviousSession(false);
-      this.logger.log("EMBEDDED_PROVIDER", "Cleared logout flag after successful authentication");
+      this.logger.debug("EMBEDDED_PROVIDER", "Cleared logout flag after successful authentication");
       return tempSession;
     }
     this.logger.info("EMBEDDED_PROVIDER", "Redirect authentication initiated, waiting for redirect completion");
@@ -10496,20 +10550,21 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
     session.organizationId = authResult.organizationId;
     session.accountDerivationIndex = authResult.accountDerivationIndex;
     session.authUserId = authResult.authUserId;
+    session.bearerToken = authResult.bearerToken;
     session.status = "completed";
     session.lastUsed = Date.now();
     if (authResult.expiresInMs > 0) {
       const now = Date.now();
       session.authenticatorCreatedAt = now;
       session.authenticatorExpiresAt = now + authResult.expiresInMs;
-      this.logger.log("EMBEDDED_PROVIDER", "Updated authenticator expiration from auth response", {
+      this.logger.debug("EMBEDDED_PROVIDER", "Updated authenticator expiration from auth response", {
         expiresInMs: authResult.expiresInMs,
         expiresAt: new Date(session.authenticatorExpiresAt).toISOString()
       });
     }
     await this.storage.saveSession(session);
     await this.storage.setShouldClearPreviousSession(false);
-    this.logger.log("EMBEDDED_PROVIDER", "Cleared logout flag after successful authentication");
+    this.logger.debug("EMBEDDED_PROVIDER", "Cleared logout flag after successful authentication");
     await this.initializeClientFromSession(session);
     await this.ensureValidAuthenticator();
     return {
@@ -10536,7 +10591,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
       throw new Error("Invalid session - missing authenticator timing");
     }
     const timeUntilExpiry = session.authenticatorExpiresAt - now;
-    this.logger.log("EMBEDDED_PROVIDER", "Checking authenticator expiration", {
+    this.logger.debug("EMBEDDED_PROVIDER", "Checking authenticator expiration", {
       expiresAt: new Date(session.authenticatorExpiresAt).toISOString(),
       timeUntilExpiry
     });
@@ -10551,7 +10606,7 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
    * This is the final step that sets up the provider's client state and retrieves available addresses.
    */
   async initializeClientFromSession(session) {
-    this.logger.log("EMBEDDED_PROVIDER", "Initializing PhantomClient from session", {
+    this.logger.debug("EMBEDDED_PROVIDER", "Initializing PhantomClient from session", {
       organizationId: session.organizationId,
       walletId: session.walletId,
       appId: session.appId
@@ -10565,7 +10620,8 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
         organizationId: session.organizationId,
         headers: {
           ...this.platform.analyticsHeaders || {},
-          ...session.authUserId ? { "x-auth-user-id": session.authUserId } : {}
+          ...session.authUserId ? { "x-auth-user-id": session.authUserId } : {},
+          ...session.bearerToken ? { Authorization: session.bearerToken } : {}
         }
       },
       this.stamper
@@ -10576,14 +10632,23 @@ var EmbeddedProvider$1 = class EmbeddedProvider {
 };
 
 // src/index.ts
+var WEB_CRYPTO_ALGORITHM_CONFIGS = {
+  [DEFAULT_AUTHENTICATOR_ALGORITHM]: {
+    generateParams: { name: "Ed25519" },
+    signParams: { name: "Ed25519" }
+  },
+  [Algorithm.secp256r1]: {
+    generateParams: { name: "ECDSA", namedCurve: "P-256" },
+    signParams: { name: "ECDSA", hash: "SHA-256" }
+  }
+};
 var IndexedDbStamper = class {
   // Optional for PKI, required for OIDC
   constructor(config = {}) {
     this.db = null;
     this.activeKeyPairRecord = null;
     this.pendingKeyPairRecord = null;
-    this.algorithm = Algorithm.ed25519;
-    // Use Ed25519 for maximum security and performance
+    this.algorithm = DEFAULT_AUTHENTICATOR_ALGORITHM;
     // The type of stamper, can be changed at any time
     this.type = "PKI";
     if (typeof window === "undefined" || !window.indexedDB) {
@@ -10597,17 +10662,34 @@ var IndexedDbStamper = class {
     this.salt = config.salt;
   }
   /**
-   * Initialize the stamper by opening IndexedDB and retrieving or generating keys
+   * Initialize the stamper by opening IndexedDB and retrieving or generating keys.
+   * Automatically selects the best supported algorithm.
    */
   async init() {
     await this.openDB();
     this.activeKeyPairRecord = await this.loadActiveKeyPairRecord();
-    if (!this.activeKeyPairRecord) {
+    if (this.activeKeyPairRecord) {
+      this.algorithm = this.activeKeyPairRecord.keyPair.privateKey.algorithm.name === "Ed25519" ? Algorithm.ed25519 : Algorithm.secp256r1;
+    } else {
+      this.algorithm = await this.getSupportedAlgorithm();
       this.activeKeyPairRecord = await this.generateAndStoreNewKeyPair("active");
     }
     this.pendingKeyPairRecord = await this.loadPendingKeyPairRecord();
     return this.activeKeyPairRecord.keyInfo;
   }
+  async getSupportedAlgorithm() {
+    for (const [algorithm, params] of Object.entries(WEB_CRYPTO_ALGORITHM_CONFIGS)) {
+      try {
+        await crypto.subtle.generateKey(params.generateParams, false, ["sign", "verify"]);
+        return algorithm;
+      } catch {
+        continue;
+      }
+    }
+    throw new Error(
+      "Your browser does not support the encryption needed for secure authentication. Please use a different browser or upgrade to a supported browser."
+    );
+  }
   /**
    * Get the public key information
    */
@@ -10635,10 +10717,7 @@ var IndexedDbStamper = class {
     }
     const dataBytes = new Uint8Array(data);
     const signature = await crypto.subtle.sign(
-      {
-        name: this.algorithm,
-        hash: "SHA-256"
-      },
+      WEB_CRYPTO_ALGORITHM_CONFIGS[this.algorithm].signParams,
       this.activeKeyPairRecord.keyPair.privateKey,
       dataBytes
     );
@@ -10648,14 +10727,14 @@ var IndexedDbStamper = class {
     const salt = params.type === "OIDC" ? params.salt : this.salt;
     const stampData = stampType === "PKI" ? {
       // Decode base58 public key to bytes, then encode as base64url (consistent with ApiKeyStamper)
-      publicKey: base64urlEncode(base58.decode(this.activeKeyPairRecord.keyInfo.publicKey)),
+      publicKey: base64urlEncode(bs582.decode(this.activeKeyPairRecord.keyInfo.publicKey)),
       signature: signatureBase64url,
       kind: "PKI",
       algorithm: this.algorithm
     } : {
       kind: "OIDC",
       idToken,
-      publicKey: base64urlEncode(base58.decode(this.activeKeyPairRecord.keyInfo.publicKey)),
+      publicKey: base64urlEncode(bs582.decode(this.activeKeyPairRecord.keyInfo.publicKey)),
       salt,
       algorithm: this.algorithm,
       signature: signatureBase64url
@@ -10750,15 +10829,13 @@ var IndexedDbStamper = class {
   }
   async generateAndStoreNewKeyPair(type) {
     const keyPair = await crypto.subtle.generateKey(
-      {
-        name: "Ed25519"
-      },
+      WEB_CRYPTO_ALGORITHM_CONFIGS[this.algorithm].generateParams,
       false,
       // non-extractable - private key can never be exported
       ["sign", "verify"]
     );
     const rawPublicKeyBuffer = await crypto.subtle.exportKey("raw", keyPair.publicKey);
-    const publicKeyBase58 = base58.encode(new Uint8Array(rawPublicKeyBuffer));
+    const publicKeyBase58 = bs582.encode(new Uint8Array(rawPublicKeyBuffer));
     const keyIdBuffer = await crypto.subtle.digest("SHA-256", rawPublicKeyBuffer);
     const keyId = base64urlEncode(new Uint8Array(keyIdBuffer)).substring(0, 16);
     const now = Date.now();
@@ -10828,15 +10905,301 @@ var IndexedDbStamper = class {
   }
 };
 
-// src/types.ts
-
-// src/debug.ts
-var DebugLevel = /* @__PURE__ */ ((DebugLevel2) => {
-  DebugLevel2[DebugLevel2["ERROR"] = 0] = "ERROR";
-  DebugLevel2[DebugLevel2["WARN"] = 1] = "WARN";
-  DebugLevel2[DebugLevel2["INFO"] = 2] = "INFO";
-  DebugLevel2[DebugLevel2["DEBUG"] = 3] = "DEBUG";
-  return DebugLevel2;
+// src/index.ts
+var AUTH2_JAR_ALGORITHM = "ES256";
+var AUTH2_JAR_TYP = "oauth-authz-req+jwt";
+var textEncoder = new TextEncoder();
+async function createAuth2RequestJar(input) {
+  const publicJwk = await globalThis.crypto.subtle.exportKey("jwk", input.keyPair.publicKey);
+  if (!_isValidPublicJwk(publicJwk)) {
+    throw new Error("Unable to export a valid P-256 public JWK for JAR header.");
+  }
+  const header = {
+    alg: AUTH2_JAR_ALGORITHM,
+    typ: AUTH2_JAR_TYP,
+    jwk: {
+      kty: "EC",
+      crv: "P-256",
+      x: publicJwk.x,
+      y: publicJwk.y
+    }
+  };
+  const encodedHeader = base64urlEncode(textEncoder.encode(JSON.stringify(header)));
+  const encodedPayload = base64urlEncode(textEncoder.encode(JSON.stringify(input.payload)));
+  const signingInput = `${encodedHeader}.${encodedPayload}`;
+  const signature = await globalThis.crypto.subtle.sign(
+    { name: "ECDSA", hash: "SHA-256" },
+    input.keyPair.privateKey,
+    textEncoder.encode(signingInput)
+  );
+  return `${signingInput}.${base64urlEncode(new Uint8Array(signature))}`;
+}
+function _isValidPublicJwk(jwk) {
+  return jwk.kty === "EC" && jwk.crv === "P-256" && typeof jwk.x === "string" && typeof jwk.y === "string";
+}
+var DEFAULT_KMS_API_VERSION = "2025-11-24";
+var Auth2KmsRpcClient = class {
+  constructor(stamper, options) {
+    this.stamper = stamper;
+    const axiosInstance = axios.create();
+    axiosInstance.interceptors.request.use(async (config) => {
+      config.headers = config.headers || {};
+      config.headers["x-app-id"] = options.appId;
+      config.headers["x-api-version"] = DEFAULT_KMS_API_VERSION;
+      const tokens = await this.stamper.getTokens();
+      if (tokens) {
+        config.headers["authorization"] = tokens.bearerToken;
+      }
+      const requestBody = typeof config.data === "string" ? config.data : config.data === void 0 ? "" : JSON.stringify(config.data);
+      const stamp = await this.stamper.stamp({ data: bufferExports.Buffer.from(requestBody, "utf-8") });
+      config.headers["x-phantom-stamp"] = stamp;
+      return config;
+    });
+    const configuration = new Configuration({ basePath: options.apiBaseUrl });
+    this.kmsApi = new KMSRPCApi(configuration, options.apiBaseUrl, axiosInstance);
+  }
+  async postKmsRpc(request, bearerToken, authUserId) {
+    const headers = { authorization: bearerToken };
+    if (authUserId) {
+      headers["x-auth-user-id"] = authUserId;
+    }
+    const response = await this.kmsApi.postKmsRpc(request, { headers });
+    const rpcBody = response.data;
+    if (rpcBody?.error) {
+      throw new Error(`KMS RPC error: ${JSON.stringify(rpcBody.error)}`);
+    }
+    return response.data;
+  }
+  extractOrganizationId(body) {
+    const result = body?.result;
+    return extractStringFromPath(result, "organizationId", "organization_id");
+  }
+  async discoverOrganizationAndWalletId(bearerToken, authUserId) {
+    const organizationId = await this.discoverOrganizationId(bearerToken, authUserId);
+    if (!organizationId) {
+      throw new Error("Unable to resolve organizationId. The Auth2 KMS did not return one.");
+    }
+    const walletId = await this.discoverWalletId(bearerToken, organizationId, authUserId);
+    if (!walletId) {
+      throw new Error("Unable to resolve walletId. The Auth2 KMS did not return or create one.");
+    }
+    return {
+      organizationId,
+      walletId
+    };
+  }
+  async discoverOrganizationId(bearerToken, authUserId) {
+    const keyInfo = this.stamper.getKeyInfo();
+    if (!keyInfo) {
+      throw new Error("Stamper not initialized");
+    }
+    const publicKey = base64urlEncode(bs582.decode(keyInfo.publicKey));
+    const created = await this.postKmsRpc(
+      {
+        method: GetOrCreatePhantomOrganizationMethodEnum.getOrCreatePhantomOrganization,
+        params: { publicKey },
+        timestampMs: Date.now()
+      },
+      bearerToken,
+      authUserId
+    );
+    return this.extractOrganizationId(created);
+  }
+  async discoverWalletId(bearerToken, organizationId, authUserId) {
+    const listResponse = await this.postKmsRpc(
+      {
+        method: GetOrganizationWalletsMethodEnum.getOrganizationWallets,
+        params: { organizationId, limit: 20, offset: 0 },
+        timestampMs: Date.now()
+      },
+      bearerToken,
+      authUserId
+    );
+    const result = listResponse?.result;
+    const wallets = result?.wallets;
+    if (Array.isArray(wallets) && wallets.length > 0) {
+      return extractStringFromPath(wallets[0], "walletId", "wallet_id");
+    }
+    const createResponse = await this.postKmsRpc(
+      {
+        method: CreateWalletMethodEnum.createWallet,
+        params: {
+          walletName: `Auth2 SDK Wallet ${Date.now()}`,
+          organizationId,
+          accounts: [
+            { curve: "Ed25519", derivationPath: "m/44'/501'/0'/0'", addressFormat: "Solana" },
+            { curve: "Secp256k1", derivationPath: "m/44'/60'/0'/0/0", addressFormat: "Ethereum" },
+            { curve: "Secp256k1", derivationPath: "m/84'/0'/0'/0", addressFormat: "BitcoinSegwit" },
+            { curve: "Ed25519", derivationPath: "m/44'/784'/0'/0'/0'", addressFormat: "Sui" }
+          ]
+        },
+        timestampMs: Date.now()
+      },
+      bearerToken,
+      authUserId
+    );
+    const createResult = createResponse?.result;
+    return extractStringFromPath(createResult, "walletId", "wallet_id");
+  }
+};
+function extractStringFromPath(obj, ...keys) {
+  if (!obj || typeof obj !== "object") {
+    return null;
+  }
+  for (const key of keys) {
+    const val = obj[key];
+    if (typeof val === "string" && val.trim().length > 0) {
+      return val.trim();
+    }
+  }
+  return null;
+}
+
+// src/index.ts
+var DEFAULT_SCOPE = "openid offline_access";
+function createCodeVerifier() {
+  const bytes = new Uint8Array(64);
+  crypto.getRandomValues(bytes);
+  return base64urlEncode(bytes).slice(0, 96);
+}
+async function createConnectStartUrl({
+  keyPair,
+  connectLoginUrl,
+  clientId,
+  redirectUri,
+  sessionId,
+  provider,
+  codeVerifier,
+  salt
+}) {
+  const nonce = await _deriveNonce(keyPair, salt);
+  const codeChallenge = await _createCodeChallenge(codeVerifier);
+  const nowSeconds = Math.floor(Date.now() / 1e3);
+  const jarPayload = {
+    aud: connectLoginUrl,
+    iat: nowSeconds,
+    exp: nowSeconds + 5 * 60,
+    // 5 minutes
+    client_id: clientId,
+    redirect_uri: redirectUri,
+    scope: DEFAULT_SCOPE,
+    nonce,
+    code_challenge: codeChallenge,
+    code_challenge_method: "S256",
+    ...provider && provider !== "phantom" && provider !== "device" && {
+      login_hint: `${provider}:auth2`
+    },
+    // Use session_id as the OAuth state so it comes back in the callback URL
+    // and can be validated without an extra sessionStorage entry.
+    state: sessionId
+  };
+  const jar = await createAuth2RequestJar({
+    payload: jarPayload,
+    keyPair
+  });
+  const url = new URL(connectLoginUrl);
+  url.hash = `jar=${jar}`;
+  return url.toString();
+}
+async function _createCodeChallenge(codeVerifier) {
+  return base64urlEncode(await sha256$2(new TextEncoder().encode(codeVerifier)));
+}
+async function _deriveNonce(keyPair, salt) {
+  const publicKey = await crypto.subtle.exportKey("raw", keyPair.publicKey);
+  const rawPublicKey = new Uint8Array(publicKey);
+  const saltBytes = new TextEncoder().encode(salt);
+  const combined = new Uint8Array(rawPublicKey.length + saltBytes.length);
+  combined.set(rawPublicKey);
+  combined.set(saltBytes, rawPublicKey.length);
+  return base64urlEncode(await sha256$2(combined));
+}
+async function exchangeAuthCode(options) {
+  return _postTokenRequest(
+    options.authApiBaseUrl,
+    new URLSearchParams({
+      grant_type: "authorization_code",
+      client_id: options.clientId,
+      redirect_uri: options.redirectUri,
+      code: options.code,
+      code_verifier: options.codeVerifier
+    })
+  );
+}
+async function refreshToken(options) {
+  const result = await _postTokenRequest(
+    options.authApiBaseUrl,
+    new URLSearchParams({
+      grant_type: "refresh_token",
+      client_id: options.clientId,
+      redirect_uri: options.redirectUri,
+      refresh_token: options.refreshToken
+    })
+  );
+  if (!result.refreshToken) {
+    throw new Error("Auth2 refresh token request did not return a refresh_token.");
+  }
+  return result;
+}
+async function _postTokenRequest(authApiBaseUrl, body) {
+  const tokenEndpoint = new URL("/oauth2/token", authApiBaseUrl).toString();
+  const tokenResponse = await fetch(tokenEndpoint, {
+    method: "POST",
+    headers: { "content-type": "application/x-www-form-urlencoded" },
+    body: body.toString()
+  });
+  if (!tokenResponse.ok) {
+    const text = await tokenResponse.text();
+    throw new Error(`Auth2 token request failed (${tokenResponse.status} ${tokenResponse.statusText}): ${text}`);
+  }
+  const tokens = await tokenResponse.json();
+  const accessToken = tokens.access_token;
+  if (!accessToken) {
+    throw new Error("Auth2 token request did not return an access_token.");
+  }
+  const idToken = tokens.id_token;
+  if (!idToken) {
+    throw new Error("Auth2 token request did not return an id_token.");
+  }
+  const bearerToken = `${tokens?.token_type ?? "Bearer"} ${accessToken}`;
+  const authUserId = _parseJwtClaim(accessToken, ["sub"]) ?? void 0;
+  const expiresInMs = tokens.expires_in != null ? tokens.expires_in * 1e3 : 0;
+  return {
+    idToken,
+    bearerToken,
+    authUserId,
+    expiresInMs,
+    refreshToken: tokens.refresh_token
+  };
+}
+function _parseJwtClaim(token, keys) {
+  try {
+    const parts = token.split(".");
+    if (parts.length < 2 || !parts[1]) {
+      return null;
+    }
+    const padded = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+    const payload = JSON.parse(atob(padded));
+    for (const key of keys) {
+      const val = payload[key];
+      if (typeof val === "string" && val.length > 0) {
+        return val;
+      }
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+
+// src/types.ts
+
+// src/debug.ts
+var DebugLevel = /* @__PURE__ */ ((DebugLevel2) => {
+  DebugLevel2[DebugLevel2["ERROR"] = 0] = "ERROR";
+  DebugLevel2[DebugLevel2["WARN"] = 1] = "WARN";
+  DebugLevel2[DebugLevel2["INFO"] = 2] = "INFO";
+  DebugLevel2[DebugLevel2["DEBUG"] = 3] = "DEBUG";
+  return DebugLevel2;
 })(DebugLevel || {});
 var Debug = class {
   constructor() {
@@ -10903,6 +11266,17 @@ var DebugCategory = {
   STORAGE: "Storage",
   SESSION: "Session"
 };
+var CUSTOM_WALLET_CONFIGS = [
+  {
+    id: "coinbase-wallet",
+    name: "Coinbase Wallet",
+    icon: "data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iNTYiIGhlaWdodD0iNTYiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PHBhdGggZD0iTTI4IDU2YzE1LjQ2NCAwIDI4LTEyLjUzNiAyOC0yOFM0My40NjQgMCAyOCAwIDAgMTIuNTM2IDAgMjhzMTIuNTM2IDI4IDI4IDI4WiIgZmlsbD0iIzFCNTNFNCIvPjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNNyAyOGMwIDExLjU5OCA5LjQwMiAyMSAyMSAyMXMyMS05LjQwMiAyMS0yMVMzOS41OTggNyAyOCA3IDcgMTYuNDAyIDcgMjhabTE3LjIzNC02Ljc2NmEzIDMgMCAwIDAtMyAzdjcuNTMzYTMgMyAwIDAgMCAzIDNoNy41MzNhMyAzIDAgMCAwIDMtM3YtNy41MzNhMyAzIDAgMCAwLTMtM2gtNy41MzNaIiBmaWxsPSIjZmZmIi8+PC9zdmc+",
+    windowProperty: "coinbaseSolana",
+    addressTypes: [DerivationInfoAddressFormatEnum.solana]
+  }
+];
+
+// src/wallets/discovery.ts
 function generateWalletIdFromEIP6963(info) {
   if (info.rdns) {
     return info.rdns.split(".").reverse().join("-");
@@ -11166,6 +11540,51 @@ async function discoverSolanaWallets() {
     walletNames: wallets.map((w) => w.name)
   };
   debug.log(DebugCategory.BROWSER_SDK, "Wallet Standard Solana discovery completed", finalLogData);
+  const customWallets = discoverCustomSolanaWallets();
+  wallets.push(...customWallets);
+  return wallets;
+}
+function discoverCustomSolanaWallets() {
+  const wallets = [];
+  if (typeof window === "undefined") {
+    debug.log(DebugCategory.BROWSER_SDK, "Custom wallet discovery skipped (not in browser environment)");
+    return wallets;
+  }
+  debug.log(DebugCategory.BROWSER_SDK, "Starting custom Solana wallet discovery", {
+    configCount: CUSTOM_WALLET_CONFIGS.length
+  });
+  for (const config of CUSTOM_WALLET_CONFIGS) {
+    if (!config.addressTypes.includes(DerivationInfoAddressFormatEnum.solana)) {
+      continue;
+    }
+    const provider = window[config.windowProperty];
+    if (!provider) {
+      debug.log(DebugCategory.BROWSER_SDK, "Custom wallet not found", {
+        walletId: config.id,
+        windowProperty: config.windowProperty
+      });
+      continue;
+    }
+    debug.log(DebugCategory.BROWSER_SDK, "Discovered custom Solana wallet", {
+      walletId: config.id,
+      walletName: config.name,
+      windowProperty: config.windowProperty
+    });
+    wallets.push({
+      id: config.id,
+      name: config.name,
+      icon: config.icon,
+      addressTypes: config.addressTypes,
+      providers: {
+        solana: provider
+      },
+      discovery: "custom"
+    });
+  }
+  debug.log(DebugCategory.BROWSER_SDK, "Custom Solana wallet discovery completed", {
+    discoveredCount: wallets.length,
+    walletIds: wallets.map((w) => w.id)
+  });
   return wallets;
 }
 function discoverPhantomWallet(addressTypes) {
@@ -11187,8 +11606,7 @@ function discoverPhantomWallet(addressTypes) {
   return {
     id: "phantom",
     name: "Phantom",
-    icon: void 0,
-    // Icon will be rendered from icons package in UI components
+    icon: PHANTOM_ICON,
     addressTypes,
     providers: {
       solana: addressTypes.includes(DerivationInfoAddressFormatEnum.solana) ? phantomInstance.solana : void 0,
@@ -11260,61 +11678,55 @@ var InjectedWalletSolanaChain = class {
   constructor(provider, walletId, walletName) {
     // Expose eventEmitter for testing - allows tests to trigger events directly
     this.eventEmitter = new EventEmitter3();
-    this._connected = false;
     this._publicKey = null;
     this.provider = provider;
     this.walletId = walletId;
     this.walletName = walletName;
     this.setupEventListeners();
   }
-  get connected() {
-    return this._connected;
-  }
   get publicKey() {
     return this._publicKey;
   }
+  get isConnected() {
+    return this.provider.isConnected || !!this._publicKey;
+  }
   async connect(options) {
-    debug.log(DebugCategory.INJECTED_PROVIDER, "External wallet Solana connect", {
-      walletId: this.walletId,
-      walletName: this.walletName,
-      onlyIfTrusted: options?.onlyIfTrusted
-    });
     try {
-      const result = await this.provider.connect(options);
-      if (typeof result === "string") {
-        this._connected = true;
-        this._publicKey = result;
-        debug.info(DebugCategory.INJECTED_PROVIDER, "External wallet Solana connected", {
+      await this.provider.connect(options);
+      const isConnected = this.provider.isConnected;
+      if (!isConnected || this.provider.publicKey === null) {
+        debug.error(DebugCategory.INJECTED_PROVIDER, "Provider not connected after connect() call", {
           walletId: this.walletId,
           walletName: this.walletName,
-          publicKey: result
+          providerConnected: isConnected,
+          providerPublicKey: this.provider.publicKey
         });
-        return { publicKey: result };
+        throw new Error("Provider not connected after connect() call");
       }
-      if (typeof result === "object" && result !== null && "publicKey" in result) {
-        this._connected = true;
-        this._publicKey = result.publicKey;
-        debug.info(DebugCategory.INJECTED_PROVIDER, "External wallet Solana connected", {
+      let publicKey;
+      const providerPublicKey = this.provider.publicKey;
+      if (typeof providerPublicKey === "string") {
+        publicKey = providerPublicKey;
+      } else if (providerPublicKey !== null && providerPublicKey !== void 0 && typeof providerPublicKey.toString === "function") {
+        publicKey = providerPublicKey.toString();
+      } else {
+        debug.error(DebugCategory.INJECTED_PROVIDER, "Invalid publicKey format in provider state", {
           walletId: this.walletId,
           walletName: this.walletName,
-          publicKey: result.publicKey
+          publicKeyType: typeof providerPublicKey
         });
-        return result;
+        throw new Error("Invalid publicKey format in provider state");
       }
-      if (Array.isArray(result) && result.length > 0) {
-        const firstAccount = result[0];
-        if (typeof firstAccount === "object" && firstAccount !== null && "address" in firstAccount) {
-          this._connected = true;
-          this._publicKey = firstAccount.address;
-          debug.info(DebugCategory.INJECTED_PROVIDER, "External wallet Solana connected", {
-            walletId: this.walletId,
-            walletName: this.walletName,
-            publicKey: firstAccount.address
-          });
-          return { publicKey: firstAccount.address };
-        }
+      if (!publicKey || publicKey.length === 0) {
+        throw new Error("Empty publicKey from provider");
       }
-      throw new Error("Unexpected connect result format");
+      this._publicKey = publicKey;
+      debug.info(DebugCategory.INJECTED_PROVIDER, "External wallet Solana connected", {
+        walletId: this.walletId,
+        walletName: this.walletName,
+        publicKey
+      });
+      return { publicKey };
     } catch (error) {
       debug.error(DebugCategory.INJECTED_PROVIDER, "External wallet Solana connect failed", {
         walletId: this.walletId,
@@ -11331,7 +11743,6 @@ var InjectedWalletSolanaChain = class {
     });
     try {
       await this.provider.disconnect();
-      this._connected = false;
       this._publicKey = null;
       debug.info(DebugCategory.INJECTED_PROVIDER, "External wallet Solana disconnected", {
         walletId: this.walletId,
@@ -11467,28 +11878,19 @@ var InjectedWalletSolanaChain = class {
   switchNetwork(_network) {
     return Promise.resolve();
   }
-  getPublicKey() {
-    return Promise.resolve(this._publicKey);
-  }
-  isConnected() {
-    return this._connected;
-  }
   setupEventListeners() {
     if (typeof this.provider.on === "function") {
       this.provider.on("connect", (publicKey) => {
-        this._connected = true;
         this._publicKey = publicKey;
         this.eventEmitter.emit("connect", publicKey);
       });
       this.provider.on("disconnect", () => {
-        this._connected = false;
         this._publicKey = null;
         this.eventEmitter.emit("disconnect");
       });
       this.provider.on("accountChanged", (publicKey) => {
-        this._publicKey = publicKey;
-        this._connected = publicKey != null && publicKey.length > 0;
-        this.eventEmitter.emit("accountChanged", publicKey);
+        this._publicKey = publicKey ? publicKey : null;
+        this.eventEmitter.emit("accountChanged", this._publicKey);
       });
     }
   }
@@ -11508,12 +11910,12 @@ var WalletStandardSolanaAdapter = class {
     this.walletName = walletName;
     this.setupEventListeners();
   }
-  get connected() {
-    return this._publicKey !== null;
-  }
   get publicKey() {
     return this._publicKey;
   }
+  get isConnected() {
+    return this._publicKey !== null;
+  }
   async connect(_options) {
     try {
       const connectFeature = this.wallet.features["standard:connect"];
@@ -11677,7 +12079,7 @@ var WalletStandardSolanaAdapter = class {
         throw new Error("No signature found in signAndSendTransaction result");
       }
       const signatureBytes = this.parseUint8Array(signatureOutput.signature);
-      const signature = base58.encode(signatureBytes);
+      const signature = bs582.encode(signatureBytes);
       return { signature };
     } catch (error) {
       debug.error(DebugCategory.INJECTED_PROVIDER, "Wallet Standard Solana signAndSendTransaction failed", {
@@ -11725,12 +12127,6 @@ var WalletStandardSolanaAdapter = class {
   async switchNetwork(_network) {
     return Promise.resolve();
   }
-  getPublicKey() {
-    return Promise.resolve(this._publicKey);
-  }
-  isConnected() {
-    return this._publicKey !== null;
-  }
   /**
    * Set up event listeners for Wallet Standard events
    * Maps Wallet Standard "change" events to "accountChanged" events
@@ -11862,9 +12258,6 @@ var InjectedWalletEthereumChain = class {
     this.walletName = walletName;
     this.setupEventListeners();
   }
-  get connected() {
-    return this._connected;
-  }
   get chainId() {
     return this._chainId;
   }
@@ -11994,7 +12387,8 @@ var InjectedWalletEthereumChain = class {
       address
     });
     try {
-      const providerConnected = this.provider.isConnected?.() || this.provider.connected || false;
+      const providerAny = this.provider;
+      const providerConnected = (typeof providerAny.isConnected === "function" ? providerAny.isConnected() : false) || (typeof providerAny.connected === "boolean" ? providerAny.connected : false);
       if (!this._connected || this._accounts.length === 0 || !providerConnected) {
         debug.log(DebugCategory.INJECTED_PROVIDER, "Not connected, attempting to connect before signing", {
           walletId: this.walletId,
@@ -12308,8 +12702,7 @@ var InjectedWalletRegistry = class {
     const phantomWallet = {
       id: "phantom",
       name: "Phantom",
-      icon: "",
-      // Icon will be rendered from icons package in UI components
+      icon: PHANTOM_ICON,
       addressTypes,
       providers: wrappedProviders,
       isPhantom: true,
@@ -12523,16 +12916,11 @@ var InjectedProvider = class {
           walletName: walletInfo.name
         });
       } catch (err) {
-        debug.warn(DebugCategory.INJECTED_PROVIDER, "Failed to connect Solana, stopping", {
+        debug.warn(DebugCategory.INJECTED_PROVIDER, "Failed to connect Solana, continuing with other chains", {
           error: err,
           walletId: this.selectedWalletId,
           walletName: walletInfo.name
         });
-        this.emit("connect_error", {
-          error: err instanceof Error ? err.message : "Failed to connect",
-          source: options?.skipEventListeners ? "auto-connect" : "manual-connect"
-        });
-        throw err;
       }
     }
     if (this.addressTypes.includes(DerivationInfoAddressFormatEnum.ethereum) && walletInfo.providers?.ethereum) {
@@ -12562,16 +12950,11 @@ var InjectedProvider = class {
           });
         }
       } catch (err) {
-        debug.warn(DebugCategory.INJECTED_PROVIDER, "Failed to connect Ethereum, stopping", {
+        debug.warn(DebugCategory.INJECTED_PROVIDER, "Failed to connect Ethereum, continuing with other chains", {
           error: err,
           walletId: this.selectedWalletId,
           walletName: walletInfo.name
         });
-        this.emit("connect_error", {
-          error: err instanceof Error ? err.message : "Failed to connect",
-          source: options?.skipEventListeners ? "auto-connect" : "manual-connect"
-        });
-        throw err;
       }
     }
     return connectedAddresses;
@@ -12631,7 +13014,8 @@ var InjectedProvider = class {
     this.emit("connect", {
       addresses: connectedAddresses,
       source: "manual-connect",
-      authUserId
+      authUserId,
+      walletId
     });
     return result;
   }
@@ -12643,12 +13027,13 @@ var InjectedProvider = class {
     if (authOptions.provider !== "injected") {
       throw new Error(`Invalid provider for injected connection: ${authOptions.provider}. Must be "injected"`);
     }
+    const requestedWalletId = authOptions.walletId || "phantom";
     this.emit("connect_start", {
       source: "manual-connect",
-      providerType: "injected"
+      providerType: "injected",
+      walletId: requestedWalletId
     });
     try {
-      const requestedWalletId = authOptions.walletId || "phantom";
       const walletInfo = this.validateAndSelectWallet(requestedWalletId);
       const connectedAddresses = await this.connectToWallet(walletInfo);
       return await this.finalizeConnection(connectedAddresses, "injected", this.selectedWalletId || void 0);
@@ -12768,7 +13153,8 @@ var InjectedProvider = class {
       this.emit("connect", {
         addresses: connectedAddresses,
         source: "auto-connect",
-        authUserId
+        authUserId,
+        walletId: this.selectedWalletId
       });
       debug.info(DebugCategory.INJECTED_PROVIDER, "Auto-connect successful", {
         addressCount: connectedAddresses.length,
@@ -12834,7 +13220,8 @@ var InjectedProvider = class {
       this.emit("connect", {
         addresses: newAddresses,
         source,
-        authUserId
+        authUserId,
+        walletId: this.selectedWalletId
       });
     };
   }
@@ -12868,7 +13255,8 @@ var InjectedProvider = class {
         this.emit("connect", {
           addresses: newAddresses,
           source: this.getAccountChangeSource(source),
-          authUserId
+          authUserId,
+          walletId: this.selectedWalletId
         });
       } else {
         const state = this.getWalletState(walletId);
@@ -12909,7 +13297,8 @@ var InjectedProvider = class {
         this.emit("connect", {
           addresses: newAddresses,
           source,
-          authUserId
+          authUserId,
+          walletId: this.selectedWalletId
         });
       }
     };
@@ -12943,7 +13332,8 @@ var InjectedProvider = class {
         this.emit("connect", {
           addresses: newAddresses,
           source: this.getAccountChangeSource(source),
-          authUserId
+          authUserId,
+          walletId: this.selectedWalletId
         });
       } else {
         const state = this.getWalletState(walletId);
@@ -13141,7 +13531,9 @@ var InjectedProvider = class {
     this.eventListenerCleanups.set(walletId, [...existingCleanups, ...cleanups]);
   }
   /**
-   * Unified event listener setup for all wallet types (Phantom and external)
+   * Unified event listener setup for all wallet types (Phantom and external).
+   * Cleans up listeners for previously selected wallets to prevent stale events
+   * from causing walletId flicker during connections.
    */
   setupEventListeners(walletInfo) {
     const walletId = this.selectedWalletId || "phantom";
@@ -13149,6 +13541,17 @@ var InjectedProvider = class {
       debug.log(DebugCategory.INJECTED_PROVIDER, "Event listeners already set up for wallet", { walletId });
       return;
     }
+    for (const existingWalletId of this.eventListenersSetup) {
+      if (existingWalletId === walletId) {
+        continue;
+      }
+      const cleanups = this.eventListenerCleanups.get(existingWalletId);
+      if (cleanups) {
+        debug.log(DebugCategory.INJECTED_PROVIDER, "Cleaning up event listeners for wallet", { existingWalletId });
+        cleanups.forEach((cleanup) => cleanup());
+      }
+      this.eventListenersSetup.delete(existingWalletId);
+    }
     debug.log(DebugCategory.INJECTED_PROVIDER, "Setting up event listeners", { walletId });
     if (this.addressTypes.includes(DerivationInfoAddressFormatEnum.solana) && walletInfo.providers?.solana) {
       this.setupSolanaEventListeners(walletInfo.providers.solana, walletId, "wallet");
@@ -13459,9 +13862,10 @@ var BrowserAuthProvider = class {
         // OAuth session management - defaults to allow refresh unless explicitly clearing after logout
         clear_previous_session: (phantomOptions.clearPreviousSession ?? false).toString(),
         allow_refresh: (phantomOptions.allowRefresh ?? true).toString(),
-        sdk_version: "1.0.2",
+        sdk_version: "1.0.7",
         sdk_type: "browser",
-        platform: detectBrowser().name
+        platform: detectBrowser().name,
+        algorithm: phantomOptions.algorithm || DEFAULT_AUTHENTICATOR_ALGORITHM
       });
       if (phantomOptions.provider) {
         debug.log(DebugCategory.PHANTOM_CONNECT_AUTH, "Provider specified, will skip selection", {
@@ -13489,7 +13893,7 @@ var BrowserAuthProvider = class {
       resolve();
     });
   }
-  resumeAuthFromRedirect(provider) {
+  async resumeAuthFromRedirect(provider) {
     try {
       const walletId = this.urlParamsAccessor.getParam("wallet_id");
       const sessionId = this.urlParamsAccessor.getParam("session_id");
@@ -13564,40 +13968,361 @@ var BrowserAuthProvider = class {
           }
         );
       }
-      return {
+      return Promise.resolve({
         walletId,
         organizationId,
         accountDerivationIndex: accountDerivationIndex ? parseInt(accountDerivationIndex) : 0,
         expiresInMs: expiresInMs ? parseInt(expiresInMs) : 0,
         authUserId: authUserId || void 0,
         provider
-      };
+      });
     } catch (error) {
       sessionStorage.removeItem("phantom-auth-context");
       throw error;
     }
   }
 };
-async function isPhantomLoginAvailable(timeoutMs = 3e3) {
-  const extensionInstalled = await waitForExtension(timeoutMs);
-  if (!extensionInstalled) {
-    return false;
+var Auth2AuthProvider = class {
+  constructor(stamper, storage, urlParamsAccessor, auth2ProviderOptions, kmsClientOptions) {
+    this.stamper = stamper;
+    this.storage = storage;
+    this.urlParamsAccessor = urlParamsAccessor;
+    this.auth2ProviderOptions = auth2ProviderOptions;
+    this.kms = new Auth2KmsRpcClient(stamper, kmsClientOptions);
   }
-  try {
-    if (!window.phantom?.app?.features || typeof window.phantom.app.features !== "function") {
-      return false;
+  /** Redirect the browser. Extracted as a static method so tests can spy on it. */
+  static navigate(url) {
+    window.location.href = url;
+  }
+  /**
+   * Builds the Auth2 /login/start URL and redirects the browser.
+   *
+   * Called by EmbeddedProvider.handleRedirectAuth() after the stamper has
+   * already been initialized and a pending Session has been saved to storage.
+   * We store the PKCE code_verifier into that session so it survives the page
+   * redirect without ever touching sessionStorage.
+   */
+  async authenticate(options) {
+    if (!this.stamper.getKeyInfo()) {
+      await this.stamper.init();
     }
-    const response = await window.phantom.app.features();
-    if (!Array.isArray(response.features)) {
-      return false;
+    const keyPair = this.stamper.getCryptoKeyPair();
+    if (!keyPair) {
+      throw new Error("Stamper key pair not found.");
     }
-    return response.features.includes("phantom_login");
-  } catch (error) {
-    console.error("Error checking Phantom extension features", error);
-    return false;
+    const codeVerifier = createCodeVerifier();
+    const session = await this.storage.getSession();
+    if (!session) {
+      throw new Error("Session not found.");
+    }
+    await this.storage.saveSession({ ...session, pkceCodeVerifier: codeVerifier });
+    const url = await createConnectStartUrl({
+      keyPair,
+      connectLoginUrl: this.auth2ProviderOptions.connectLoginUrl,
+      clientId: this.auth2ProviderOptions.clientId,
+      redirectUri: this.auth2ProviderOptions.redirectUri,
+      sessionId: options.sessionId,
+      provider: options.provider,
+      codeVerifier,
+      // The P-256 ephemeral key is unique per wallet, so no additional salt is needed.
+      salt: ""
+    });
+    Auth2AuthProvider.navigate(url);
   }
-}
-async function waitForExtension(timeoutMs) {
+  /**
+   * Processes the Auth2 callback after the browser returns from /login/start.
+   *
+   * Exchanges the authorization code for tokens, discovers the organization
+   * and wallet via KMS RPC, then returns a completed AuthResult.
+   */
+  async resumeAuthFromRedirect(provider) {
+    const code = this.urlParamsAccessor.getParam("code");
+    if (!code) {
+      return null;
+    }
+    if (!this.stamper.getKeyInfo()) {
+      await this.stamper.init();
+    }
+    const session = await this.storage.getSession();
+    if (!session) {
+      throw new Error("Session not found.");
+    }
+    const codeVerifier = session?.pkceCodeVerifier;
+    if (!codeVerifier) {
+      return null;
+    }
+    const state = this.urlParamsAccessor.getParam("state");
+    if (!state || state !== session.sessionId) {
+      throw new Error("Missing or invalid Auth2 state parameter \u2014 possible CSRF attack.");
+    }
+    const error = this.urlParamsAccessor.getParam("error");
+    if (error) {
+      const description = this.urlParamsAccessor.getParam("error_description");
+      throw new Error(`Auth2 callback error: ${description ?? error}`);
+    }
+    const { idToken, bearerToken, authUserId, expiresInMs, refreshToken } = await exchangeAuthCode({
+      authApiBaseUrl: this.auth2ProviderOptions.authApiBaseUrl,
+      clientId: this.auth2ProviderOptions.clientId,
+      redirectUri: this.auth2ProviderOptions.redirectUri,
+      code,
+      codeVerifier
+    });
+    await this.stamper.setTokens({ idToken, bearerToken, refreshToken, expiresInMs });
+    await this.storage.saveSession({
+      ...session,
+      status: "completed",
+      bearerToken,
+      authUserId,
+      pkceCodeVerifier: void 0
+      // no longer needed after code exchange
+    });
+    const { organizationId, walletId } = await this.kms.discoverOrganizationAndWalletId(bearerToken, authUserId);
+    return {
+      walletId,
+      organizationId,
+      provider,
+      accountDerivationIndex: 0,
+      // discoverWalletId uses derivation index of 0.
+      expiresInMs,
+      authUserId,
+      bearerToken
+    };
+  }
+};
+var STORE_NAME = "crypto-keys";
+var ACTIVE_KEY = "auth2-p256-signing-key";
+var Auth2Stamper = class {
+  /**
+   * @param dbName - IndexedDB database name (use a unique name per app to
+   *   avoid key collisions with other stampers, e.g. `phantom-auth2-<appId>`).
+   * @param refreshConfig - When provided, the stamper will automatically refresh
+   *   the id_token using the refresh_token before it expires.
+   */
+  constructor(dbName, refreshConfig) {
+    this.dbName = dbName;
+    this.refreshConfig = refreshConfig;
+    this.db = null;
+    this._keyPair = null;
+    this._keyInfo = null;
+    this._idToken = null;
+    this._bearerToken = null;
+    this._refreshToken = null;
+    this._tokenExpiresAt = null;
+    this.algorithm = Algorithm.secp256r1;
+    this.type = "OIDC";
+  }
+  async init() {
+    await this.openDB();
+    const stored = await this.loadRecord();
+    if (stored) {
+      this._keyPair = stored.keyPair;
+      this._keyInfo = stored.keyInfo;
+      if (stored.idToken) {
+        this._idToken = stored.idToken;
+      }
+      if (stored.bearerToken) {
+        this._bearerToken = stored.bearerToken;
+      }
+      if (stored.refreshToken) {
+        this._refreshToken = stored.refreshToken;
+      }
+      if (stored.tokenExpiresAt) {
+        this._tokenExpiresAt = stored.tokenExpiresAt;
+      }
+      return this._keyInfo;
+    }
+    return this.generateAndStore();
+  }
+  getKeyInfo() {
+    return this._keyInfo;
+  }
+  getCryptoKeyPair() {
+    return this._keyPair;
+  }
+  /**
+   * Returns the current token state (refreshing proactively if near expiry),
+   * or null if no token has been set yet.
+   */
+  async getTokens() {
+    if (this.refreshConfig && this._refreshToken && this._tokenExpiresAt !== null && Date.now() >= this._tokenExpiresAt - TOKEN_REFRESH_BUFFER_MS) {
+      const refreshed = await refreshToken({
+        authApiBaseUrl: this.refreshConfig.authApiBaseUrl,
+        clientId: this.refreshConfig.clientId,
+        redirectUri: this.refreshConfig.redirectUri,
+        refreshToken: this._refreshToken
+      });
+      await this.setTokens(refreshed);
+    }
+    if (!this._idToken || !this._bearerToken) {
+      return null;
+    }
+    return {
+      idToken: this._idToken,
+      bearerToken: this._bearerToken,
+      refreshToken: this._refreshToken ?? void 0
+    };
+  }
+  /**
+   * Arms the stamper with the OIDC token data for subsequent KMS stamp() calls.
+   *
+   * Persists the tokens to IndexedDB alongside the key pair so that
+   * auto-connect can restore them on the next page load without a new login.
+   *
+   * @param refreshToken - When provided alongside a `refreshConfig`, enables
+   *   silent token refresh before the token expires.
+   * @param expiresInMs - Token lifetime in milliseconds (from `expires_in * 1000`).
+   *   Used to compute the absolute expiry time for proactive refresh.
+   */
+  async setTokens({
+    idToken,
+    bearerToken,
+    refreshToken,
+    expiresInMs
+  }) {
+    if (!this.db) {
+      await this.openDB();
+    }
+    this._idToken = idToken;
+    this._bearerToken = bearerToken;
+    this._refreshToken = refreshToken ?? null;
+    this._tokenExpiresAt = expiresInMs != null ? Date.now() + expiresInMs : null;
+    const existing = await this.loadRecord();
+    if (existing) {
+      await this.storeRecord({
+        ...existing,
+        idToken,
+        bearerToken,
+        refreshToken,
+        tokenExpiresAt: this._tokenExpiresAt ?? void 0
+      });
+    }
+  }
+  async stamp(params) {
+    if (!this._keyPair || !this._keyInfo || this._idToken === null) {
+      throw new Error("Auth2Stamper not initialized. Call init() first.");
+    }
+    const signatureRaw = await crypto.subtle.sign(
+      { name: "ECDSA", hash: "SHA-256" },
+      this._keyPair.privateKey,
+      new Uint8Array(params.data)
+    );
+    const rawPublicKey = bs582.decode(this._keyInfo.publicKey);
+    const stampData = {
+      kind: this.type,
+      idToken: this._idToken,
+      publicKey: base64urlEncode(rawPublicKey),
+      algorithm: this.algorithm,
+      // The P-256 ephemeral key is unique per wallet, so no additional salt is needed.
+      salt: "",
+      signature: base64urlEncode(new Uint8Array(signatureRaw))
+    };
+    return base64urlEncode(new TextEncoder().encode(JSON.stringify(stampData)));
+  }
+  async resetKeyPair() {
+    await this.clear();
+    return this.generateAndStore();
+  }
+  async clear() {
+    await this.clearStoredRecord();
+    this._keyPair = null;
+    this._keyInfo = null;
+    this._idToken = null;
+    this._bearerToken = null;
+    this._refreshToken = null;
+    this._tokenExpiresAt = null;
+  }
+  // Auth2 doesn't use key rotation; provide minimal no-op implementations.
+  async rotateKeyPair() {
+    return this.init();
+  }
+  // eslint-disable-next-line @typescript-eslint/require-await
+  async commitRotation(authenticatorId) {
+    if (this._keyInfo) {
+      this._keyInfo.authenticatorId = authenticatorId;
+    }
+  }
+  async rollbackRotation() {
+  }
+  async generateAndStore() {
+    const keyPair = await crypto.subtle.generateKey(
+      { name: "ECDSA", namedCurve: "P-256" },
+      false,
+      // non-extractable — private key never leaves Web Crypto
+      ["sign", "verify"]
+    );
+    const rawPublicKey = new Uint8Array(await crypto.subtle.exportKey("raw", keyPair.publicKey));
+    const publicKeyBase58 = bs582.encode(rawPublicKey);
+    const keyIdBuffer = await crypto.subtle.digest("SHA-256", rawPublicKey.buffer);
+    const keyId = base64urlEncode(new Uint8Array(keyIdBuffer)).substring(0, 16);
+    this._keyPair = keyPair;
+    this._keyInfo = {
+      keyId,
+      publicKey: publicKeyBase58,
+      createdAt: Date.now()
+    };
+    await this.storeRecord({ keyPair, keyInfo: this._keyInfo });
+    return this._keyInfo;
+  }
+  async openDB() {
+    return new Promise((resolve, reject) => {
+      const request = indexedDB.open(this.dbName, 1);
+      request.onsuccess = () => {
+        this.db = request.result;
+        resolve();
+      };
+      request.onerror = () => reject(request.error);
+      request.onupgradeneeded = (event) => {
+        const db = event.target.result;
+        if (!db.objectStoreNames.contains(STORE_NAME)) {
+          db.createObjectStore(STORE_NAME);
+        }
+      };
+    });
+  }
+  async loadRecord() {
+    return new Promise((resolve, reject) => {
+      if (!this.db) {
+        throw new Error("Database not initialized");
+      }
+      const request = this.db.transaction([STORE_NAME], "readonly").objectStore(STORE_NAME).get(ACTIVE_KEY);
+      request.onsuccess = () => {
+        resolve(request.result ?? null);
+      };
+      request.onerror = () => {
+        reject(request.error);
+      };
+    });
+  }
+  async storeRecord(record) {
+    return new Promise((resolve, reject) => {
+      if (!this.db) {
+        throw new Error("Database not initialized");
+      }
+      const request = this.db.transaction([STORE_NAME], "readwrite").objectStore(STORE_NAME).put(record, ACTIVE_KEY);
+      request.onsuccess = () => {
+        resolve();
+      };
+      request.onerror = () => {
+        reject(request.error);
+      };
+    });
+  }
+  async clearStoredRecord() {
+    return new Promise((resolve, reject) => {
+      if (!this.db) {
+        throw new Error("Database not initialized");
+      }
+      const request = this.db.transaction([STORE_NAME], "readwrite").objectStore(STORE_NAME).delete(ACTIVE_KEY);
+      request.onsuccess = () => {
+        resolve();
+      };
+      request.onerror = () => {
+        reject(request.error);
+      };
+    });
+  }
+};
+async function waitForPhantomExtension(timeoutMs = 3e3) {
   return new Promise((resolve) => {
     const startTime = Date.now();
     const checkInterval = 100;
@@ -13620,6 +14345,27 @@ async function waitForExtension(timeoutMs) {
   });
 }
 
+// src/isPhantomLoginAvailable.ts
+async function isPhantomLoginAvailable(timeoutMs = 3e3) {
+  const extensionInstalled = await waitForPhantomExtension(timeoutMs);
+  if (!extensionInstalled) {
+    return false;
+  }
+  try {
+    if (!window.phantom?.app?.features || typeof window.phantom.app.features !== "function") {
+      return false;
+    }
+    const response = await window.phantom.app.features();
+    if (!Array.isArray(response.features)) {
+      return false;
+    }
+    return response.features.includes("phantom_login");
+  } catch (error) {
+    console.error("Error checking Phantom extension features", error);
+    return false;
+  }
+}
+
 // src/providers/embedded/adapters/phantom-app.ts
 var BrowserPhantomAppProvider = class {
   /**
@@ -13674,33 +14420,53 @@ var BrowserPhantomAppProvider = class {
 
 // src/providers/embedded/adapters/logger.ts
 var BrowserLogger = class {
-  info(category, message, data) {
-    debug.info(category, message, data);
+  info(message, ...args) {
+    debug.info(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
-  warn(category, message, data) {
-    debug.warn(category, message, data);
+  warn(message, ...args) {
+    debug.warn(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
-  error(category, message, data) {
-    debug.error(category, message, data);
+  error(message, ...args) {
+    debug.error(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
-  log(category, message, data) {
-    debug.log(category, message, data);
+  debug(message, ...args) {
+    debug.log(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
 };
 var EmbeddedProvider = class extends EmbeddedProvider$1 {
   constructor(config) {
     debug.log(DebugCategory.EMBEDDED_PROVIDER, "Initializing Browser EmbeddedProvider", { config });
     const urlParamsAccessor = new BrowserURLParamsAccessor();
-    const stamper = new IndexedDbStamper({
+    const storage = new BrowserStorage();
+    const stamper = config.unstable__auth2Options ? new Auth2Stamper(`phantom-auth2-${config.appId}`, {
+      authApiBaseUrl: config.unstable__auth2Options.authApiBaseUrl,
+      clientId: config.unstable__auth2Options.clientId,
+      redirectUri: config.authOptions?.redirectUrl ?? ""
+    }) : new IndexedDbStamper({
       dbName: `phantom-embedded-sdk-${config.appId}`,
       storeName: "crypto-keys",
       keyName: "signing-key"
     });
     const platformName = getPlatformName();
     const { name: browserName, version } = detectBrowser();
+    const authProvider = config.unstable__auth2Options && config.authOptions?.authUrl && config.authOptions?.redirectUrl && stamper instanceof Auth2Stamper ? new Auth2AuthProvider(
+      stamper,
+      storage,
+      urlParamsAccessor,
+      {
+        redirectUri: config.authOptions.redirectUrl,
+        connectLoginUrl: config.authOptions.authUrl,
+        clientId: config.unstable__auth2Options.clientId,
+        authApiBaseUrl: config.unstable__auth2Options.authApiBaseUrl
+      },
+      {
+        apiBaseUrl: config.apiBaseUrl,
+        appId: config.appId
+      }
+    ) : new BrowserAuthProvider(urlParamsAccessor);
     const platform = {
-      storage: new BrowserStorage(),
-      authProvider: new BrowserAuthProvider(urlParamsAccessor),
+      storage,
+      authProvider,
       phantomAppProvider: new BrowserPhantomAppProvider(),
       urlParamsAccessor,
       stamper,
@@ -13708,13 +14474,12 @@ var EmbeddedProvider = class extends EmbeddedProvider$1 {
       // Use detected browser name and version for identification
       analyticsHeaders: {
         [ANALYTICS_HEADERS.SDK_TYPE]: "browser",
-        [ANALYTICS_HEADERS.PLATFORM]: browserName,
-        // firefox, chrome, safari, etc.
+        [ANALYTICS_HEADERS.PLATFORM]: "ext-sdk",
         [ANALYTICS_HEADERS.PLATFORM_VERSION]: version,
-        // Full user agent for more detailed info
+        [ANALYTICS_HEADERS.CLIENT]: browserName,
         [ANALYTICS_HEADERS.APP_ID]: config.appId,
         [ANALYTICS_HEADERS.WALLET_TYPE]: config.embeddedWalletType,
-        [ANALYTICS_HEADERS.SDK_VERSION]: "1.0.2"
+        [ANALYTICS_HEADERS.SDK_VERSION]: "1.0.7"
         // Replaced at build time
       }
     };
@@ -13747,11 +14512,12 @@ function isAuthCallbackUrl(searchParams) {
 }
 
 // src/utils/deeplink.ts
-function getDeeplinkToPhantom(ref) {
-  if (!window.location.href.startsWith("http:") && !window.location.href.startsWith("https:")) {
+function getDeeplinkToPhantom(ref, currentHref) {
+  const resolvedHref = window.location.href;
+  if (!resolvedHref.startsWith("http:") && !resolvedHref.startsWith("https:")) {
     throw new Error("Invalid URL protocol - only HTTP/HTTPS URLs are supported for deeplinks");
   }
-  const currentUrl = encodeURIComponent(window.location.href);
+  const currentUrl = encodeURIComponent(resolvedHref);
   const refParam = "";
   return `https://phantom.app/ul/browse/${currentUrl}${refParam}`;
 }
@@ -13847,8 +14613,14 @@ var ProviderManager = class {
     } else if (requestedProvider === "deeplink") {
       try {
         const deeplinkUrl = getDeeplinkToPhantom();
-        if (typeof window !== "undefined") {
-          window.location.href = deeplinkUrl;
+        if (typeof window !== "undefined" && window.location) {
+          try {
+            window.location.href = deeplinkUrl;
+          } catch (error) {
+            debug.warn(DebugCategory.PROVIDER_MANAGER, "Failed to set deeplink location", {
+              error: error instanceof Error ? error.message : String(error)
+            });
+          }
         }
         return {
           addresses: [],
@@ -14121,6 +14893,7 @@ var ProviderManager = class {
           authUrl,
           redirectUrl: this.config.authOptions?.redirectUrl || this.getValidatedCurrentUrl()
         },
+        unstable__auth2Options: this.config.unstable__auth2Options,
         embeddedWalletType: embeddedWalletType || DEFAULT_EMBEDDED_WALLET_TYPE,
         addressTypes: this.config.addressTypes || [DerivationInfoAddressFormatEnum.solana]
       });
@@ -14315,6 +15088,7 @@ var BrowserSDK = class {
    */
   async autoConnect() {
     debug.log(DebugCategory.BROWSER_SDK, "Attempting auto-connect with fallback strategy");
+    await this.discoverWallets();
     const result = await this.providerManager.autoConnect();
     if (result) {
       debug.info(DebugCategory.BROWSER_SDK, "Auto-connect successful", {
@@ -14461,28 +15235,6 @@ var BrowserSDK = class {
     }
   }
 };
-async function waitForPhantomExtension(timeoutMs = 3e3) {
-  return new Promise((resolve) => {
-    const startTime = Date.now();
-    const checkInterval = 100;
-    const checkForExtension = () => {
-      try {
-        if (isInstalled()) {
-          resolve(true);
-          return;
-        }
-      } catch (error) {
-      }
-      const elapsed = Date.now() - startTime;
-      if (elapsed >= timeoutMs) {
-        resolve(false);
-        return;
-      }
-      setTimeout(checkForExtension, checkInterval);
-    };
-    checkForExtension();
-  });
-}
 
 // src/utils/index.ts
 var hexToRgba = (hex, opacity) => {
@@ -16088,4 +16840,4 @@ function ConnectBox({ maxWidth = "350px", transparent = false, appIcon, appName
 }
 
 export { DerivationInfoAddressFormatEnum as AddressType, ConnectBox, ConnectButton, DebugLevel, NetworkId, PhantomProvider, darkTheme, debug, isMobileDevice, lightTheme, mergeTheme, useAccounts, useAutoConfirm, useConnect, useDisconnect, useDiscoveredWallets, useEthereum, useIsExtensionInstalled, useIsPhantomLoginAvailable, useModal, usePhantom, useSolana, useTheme };
-//# sourceMappingURL=index-B2ytfYTB.esm.js.map
+//# sourceMappingURL=index-D5Ut2JU7.esm.js.map