@bounded-sh/client 0.0.28 → 0.0.30

package/dist/auth/index.d.ts

@@ -43,37 +43,42 @@ export declare function signInAnonymously(): Promise<User | null>;
  */
 export declare function loginWithPrivy(options?: LoginOptions): Promise<User | null>;
 /**
- * @deprecated Inline app-origin OTP is retired. Use
- * `loginWithRedirect({ redirectUri, methods: ["email"] })` so the credential is
- * entered on the Bounded hosted issuer.
+ * Send a 6-digit login code to `email` (Bounded Better Auth). Step 1 of the
+ * inline email flow — build your own email/code UI for full control over the
+ * look, or just call `login()` for the built-in modal. Works on web AND React
+ * Native (no DOM needed). Prefer `loginWithRedirect()`/`loginWithPopup()` if you
+ * want the credential entered on Bounded's hosted page instead.
  */
 export declare function sendEmailOtp(email: string): Promise<{
     ok: true;
     expiresInSeconds?: number;
 }>;
 /**
- * @deprecated Inline app-origin text OTP is retired. Use hosted login with
- * `provider: "text"` or `methods: ["text"]` when text OTP is enabled.
+ * Send a 6-digit login code by text message. Requires the configured Bounded
+ * auth issuer to have text OTP explicitly enabled and SMS delivery configured.
+ * Works on web AND React Native.
  */
 export declare function sendTextOtp(phoneNumber: string): Promise<{
     ok: true;
     expiresInSeconds?: number;
 }>;
 /**
- * @deprecated Inline app-origin OTP is retired. Finish hosted login with
- * `completeLoginFromRedirect()` on web; React Native `loginWithRedirect()`
- * resolves inline.
+ * Verify the `code` for `email`, establish the session, and return the user.
+ * Step 2 of the inline email flow. Coexists with signInAnonymously()/wallets.
  */
 export declare function verifyEmailOtp(email: string, code: string): Promise<User | null>;
 /**
- * @deprecated Inline app-origin text OTP is retired. Finish hosted login with
- * `completeLoginFromRedirect()` on web; React Native `loginWithRedirect()`
- * resolves inline.
+ * Verify the text-message `code`, establish the session, and return the user.
+ * Phone-only users have no `user.email`; use `user.id` for app identity.
  */
 export declare function verifyTextOtp(phoneNumber: string, code: string): Promise<User | null>;
 /**
- * @deprecated Inline app-origin guest upgrade is retired. Send the user through
- * hosted login and transfer guest-owned data explicitly.
+ * UPGRADE the current anonymous (guest) session by linking an email — Firebase
+ * `linkWithCredential` parity. Send the code first with `sendEmailOtp(email)`,
+ * then call `linkEmail(email, code)`. If the email is brand-new the guest's
+ * `@user.id` (and its data) is preserved; if the email already exists the user
+ * just signs into it (no merge). Requires an active guest session, and the issuer
+ * refuses if the wallet is already linked. Browser/React-Native only.
  */
 export declare function linkEmail(email: string, code: string): Promise<User | null>;
 export declare function login(options?: LoginOptions): Promise<User | null>;

package/dist/auth/oidc-auth.d.ts

@@ -1,7 +1,13 @@
 import type { User } from '@bounded-sh/core';
 export type HostedAuthMethod = 'email' | 'text' | 'phone' | 'google' | 'apple' | 'github' | (string & {});
 export interface OidcLoginOptions {
-    redirectUri: string;
+    /**
+     * Where the issuer returns the user after login. OPTIONAL on web — defaults to the
+     * CURRENT page (`window.location.origin + pathname`), so the user lands back where they
+     * started and `completeLoginFromRedirect()` finishes it. REQUIRED on React Native: pass
+     * the https universal link whose origin the app owner registered.
+     */
+    redirectUri?: string;
     /**
      * Hosted-login methods to show. Omit to show every method enabled on the
      * Bounded issuer. Include social provider ids directly, e.g.

package/dist/auth/providers/email-auth-provider.d.ts

@@ -1,22 +1,33 @@
 import type { AuthProvider, User, TransactionResult, SolTransaction, EVMTransaction, SetOptions } from '@bounded-sh/core';
-import type { Transaction, VersionedTransaction } from '@solana/web3.js';
-/** @deprecated Inline app-origin OTP is retired. Use loginWithRedirect(). */
+import { Transaction, VersionedTransaction } from '@solana/web3.js';
+/** Send a login code to `email`. Step 1 of the inline email-OTP flow. */
 export declare function sendEmailOtp(email: string): Promise<{
     ok: true;
     expiresInSeconds?: number;
 }>;
-/** @deprecated Inline app-origin text OTP is retired. Use loginWithRedirect(). */
+/** Send a login code by text message. Requires the Bounded issuer to have text OTP explicitly enabled and SMS configured. */
 export declare function sendTextOtp(phoneNumber: string): Promise<{
     ok: true;
     expiresInSeconds?: number;
 }>;
-/** @deprecated Inline app-origin OTP is retired. Use hosted loginWithRedirect(). */
+/**
+ * Verify the code for `email` and establish the session. Step 2 of the flow.
+ * Stores the Bounded id token (the realtime bearer) and sets the current user.
+ */
 export declare function verifyEmailOtp(email: string, otp: string): Promise<User>;
-/** @deprecated Inline app-origin text OTP is retired. Use hosted loginWithRedirect(). */
+/**
+ * Verify the text-message code for `phoneNumber` and establish the session.
+ * Phone-only users have `user.email === null`; use `user.id` for ownership.
+ */
 export declare function verifyTextOtp(phoneNumber: string, otp: string): Promise<User>;
 /**
- * @deprecated Inline app-origin guest upgrade is retired. Use hosted login and
- * transfer guest-owned data explicitly.
+ * UPGRADE an anonymous (guest) session by LINKING an email credential — Firebase
+ * `linkWithCredential` parity. The guest's `guestToken` is sent to the auth issuer
+ * which, IF the email is brand-new, makes the new account ADOPT the guest's id so
+ * `@user.id` is preserved and the guest's data carries over. If the email already
+ * exists, the user just signs into it (stays separate; `linked:false`). On success
+ * the upgraded session replaces the guest session and the user is no longer
+ * anonymous. `guestToken` is captured by the caller BEFORE switching auth methods.
  */
 export declare function linkEmailWithGuest(email: string, otp: string, guestToken: string): Promise<{
     user: User;
@@ -29,7 +40,7 @@ export declare class EmailAuthProvider implements AuthProvider {
     logout(): Promise<void>;
     signMessage(_message: string): Promise<string>;
     runTransaction(_evm?: EVMTransaction, _sol?: SolTransaction, _options?: SetOptions): Promise<TransactionResult>;
-    signTransaction(_transaction: Transaction | VersionedTransaction): Promise<Transaction | VersionedTransaction>;
+    signTransaction(_t: Transaction | VersionedTransaction): Promise<Transaction | VersionedTransaction>;
     signAndSubmitTransaction(): Promise<string>;
     getNativeMethods(): Promise<any>;
 }