@bounded-sh/client 0.0.43 → 0.0.48

package/dist/auth/crossmint-signer-bridge.d.ts

@@ -1,4 +1,5 @@
-import { Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { EVMTransaction, TransactionResult } from '@bounded-sh/core';
+import type { Transaction, VersionedTransaction } from '@solana/web3.js';
 export type SignerAction = {
     kind: 'sendToken';
     recipient: string;
@@ -7,6 +8,9 @@ export type SignerAction = {
 } | {
     kind: 'transaction';
     serializedTransaction: string;
+} | {
+    kind: 'evmTransaction';
+    transaction: Pick<EVMTransaction, 'to' | 'data' | 'value' | 'chainId'>;
 };
 export interface SignerResult {
     hash?: string;
@@ -29,9 +33,13 @@ export declare function signViaSignerPopup(action: SignerAction): Promise<Signer
  * route signing through the popup rather than throw "no wallet").
  */
 export declare function hasEmbeddedWallet(): boolean;
+/** Whether the active email/social session carries an embedded Crossmint EVM wallet. */
+export declare function hasEmbeddedEvmWallet(): boolean;
 /** signAndSubmitTransaction for embedded wallets: serialize + route through the
  *  signer popup, resolve with the on-chain transaction signature/hash. */
 export declare function embeddedSignAndSubmit(transaction: Transaction | VersionedTransaction): Promise<string>;
 /** Send a token from the embedded wallet (Crossmint `wallet.send`). Convenience
  *  primitive for the common "send crypto" case; returns the tx result. */
 export declare function embeddedSendToken(recipient: string, token: string, amount: string): Promise<SignerResult>;
+/** Submit a validated BoundedRuntime EVM write through the user's email signer. */
+export declare function embeddedRunEvmTransaction(transaction: EVMTransaction): Promise<TransactionResult>;

package/dist/auth/index.d.ts

@@ -1,4 +1,4 @@
-import { AuthProvider, User, ClientConfig } from "@bounded-sh/core";
+import type { AuthProvider, User, ClientConfig } from "@bounded-sh/core";
 /**
  * Clears the session if it was created by a different auth method.
  * Returns true if the session was cleared, false if the session is compatible.

package/dist/auth/providers/email-auth-provider.d.ts

@@ -1,12 +1,11 @@
 import type { AuthProvider, User, TransactionResult, SolTransaction, EVMTransaction, SetOptions } from '@bounded-sh/core';
-import { Transaction, VersionedTransaction } from '@solana/web3.js';
-import { PublicKey } from '@solana/web3.js';
+import type { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
 export declare class EmailAuthProvider implements AuthProvider {
     login(): Promise<User | null>;
     restoreSession(): Promise<User | null>;
     logout(): Promise<void>;
     signMessage(_message: string): Promise<string>;
-    runTransaction(_evm?: EVMTransaction, _sol?: SolTransaction, _options?: SetOptions): Promise<TransactionResult>;
+    runTransaction(evm?: EVMTransaction, sol?: SolTransaction, options?: SetOptions): Promise<TransactionResult>;
     signTransaction(_t: Transaction | VersionedTransaction): Promise<Transaction | VersionedTransaction>;
     signAndSubmitTransaction(transaction: Transaction | VersionedTransaction, _feePayer?: PublicKey): Promise<string>;
     getNativeMethods(): Promise<any>;

package/dist/auth/providers/guest-auth-provider.d.ts

@@ -1,5 +1,5 @@
 import type { AuthProvider, User, TransactionResult, SolTransaction, EVMTransaction, SetOptions } from '@bounded-sh/core';
-import { Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { Transaction, VersionedTransaction } from '@solana/web3.js';
 export declare class GuestAuthProvider implements AuthProvider {
     login(): Promise<User | null>;
     restoreSession(): Promise<User | null>;

package/dist/auth/providers/injected-evm-wallet-provider.d.ts

@@ -0,0 +1,37 @@
+import type { EVMTransaction, SolTransaction, TransactionResult, User, AuthProvider, SetOptions } from '@bounded-sh/core';
+import type { Transaction, VersionedTransaction, PublicKey } from '@solana/web3.js';
+import { defaultInjectedEvmProvider, type InjectedEvmProvider, type InjectedEvmWalletConfig } from './injected-evm-wallet-types';
+export { defaultInjectedEvmProvider };
+export type { InjectedEvmProvider, InjectedEvmWalletConfig };
+export declare class InjectedEvmWalletProvider implements AuthProvider {
+    private static instance;
+    private config;
+    private authenticatedAddress;
+    constructor(config?: InjectedEvmWalletConfig);
+    private evmUser;
+    private resolveProvider;
+    /** Connect the injected wallet and return its canonical lowercase EVM address. */
+    private connectAddress;
+    /** Current chain id the wallet is connected to (EIP-155 number), or null. */
+    private currentChainId;
+    login(): Promise<User | null>;
+    private resolveDomain;
+    private resolveUri;
+    private markAuthMethod;
+    restoreSession(): Promise<User | null>;
+    logout(): Promise<void>;
+    /** App-facing message signing: EIP-191 personal_sign, returns 0x r‖s‖v hex. */
+    signMessage(message: string): Promise<string>;
+    signTransaction(_transaction: Transaction | VersionedTransaction): Promise<Transaction | VersionedTransaction>;
+    signAndSubmitTransaction(_transaction: Transaction | VersionedTransaction, _feePayer?: PublicKey): Promise<string>;
+    /**
+     * Onchain write path: submit the worker's PRE-BUILT EIP-1559 tx via
+     * eth_sendTransaction (the injected wallet signs + submits in one step), then
+     * poll for the receipt. The EVM branch of operations.ts's 202 dispatch calls
+     * this with the pre-built payload in the EVM slot and the Solana slot undefined.
+     */
+    runTransaction(evmTransactionData?: EVMTransaction, solTransactionData?: SolTransaction, options?: SetOptions): Promise<TransactionResult>;
+    /** Poll eth_getTransactionReceipt until it lands (bounded retries) or throw. */
+    private waitForReceipt;
+    getNativeMethods(): Promise<any>;
+}

package/dist/auth/providers/injected-evm-wallet-types.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Minimal EIP-1193 provider shape. Every browser EVM wallet implements
+ * `request({ method, params })`; `on`/`removeListener` are optional (used for
+ * chain/account change events, which this path does not require).
+ */
+export interface InjectedEvmProvider {
+    request(args: {
+        method: string;
+        params?: any[] | Record<string, any>;
+    }): Promise<any>;
+    on?(event: string, listener: (...args: any[]) => void): void;
+    removeListener?(event: string, listener: (...args: any[]) => void): void;
+    isMetaMask?: boolean;
+}
+/** EIP-6963 provider metadata announced by a wallet. */
+export interface Eip6963ProviderInfo {
+    uuid: string;
+    name: string;
+    icon: string;
+    rdns: string;
+}
+/** EIP-6963 `eip6963:announceProvider` detail payload. */
+export interface Eip6963ProviderDetail {
+    info: Eip6963ProviderInfo;
+    provider: InjectedEvmProvider;
+}
+export interface InjectedEvmWalletConfig {
+    /**
+     * Resolve/pick the injected EVM provider. Defaults to EIP-6963 discovery
+     * (first announced wallet) then `window.ethereum`. Pass this to point at a
+     * specific wallet, or to bridge a custom/mock provider.
+     */
+    getProvider?: () => InjectedEvmProvider | null | undefined;
+    /**
+     * EIP-155 chain id the app expects to write on. Used for the SIWE `Chain ID`
+     * line and as the chain-switch guard target in runTransaction (a pre-built tx
+     * always carries its own chainId, which takes precedence there).
+     */
+    chainId?: number;
+    /** Explicit RPC URL override (reserved; the injected wallet submits via itself). */
+    rpcUrl?: string | null;
+    /**
+     * Optional assertion of the SIWE `domain`. It must equal
+     * window.location.host; cross-origin overrides are rejected.
+     */
+    domain?: string;
+    /** Optional assertion of the SIWE URI. Its origin must equal window.location.origin. */
+    uri?: string;
+    /** Trusted BoundedRuntime for `chainId`; required for single-chain writes. */
+    runtimeAddress?: string;
+    /** Trusted per-chain BoundedRuntime allowlist for multi-chain writes. */
+    runtimeAddresses?: Record<string, string>;
+}
+/**
+ * Request + collect EIP-6963 providers. Dispatches `eip6963:requestProvider`
+ * (synchronous — already-loaded wallets announce in the same tick) and returns
+ * every wallet announced so far. Kept synchronous so it works inside a user
+ * gesture and can be eagerly exported from the SDK entry.
+ */
+export declare function requestEip6963Providers(): Eip6963ProviderDetail[];
+/**
+ * Default EVM provider discovery: EIP-6963 first (multi-wallet, collision-free),
+ * then legacy `window.ethereum`. Returns null when no injected wallet is present.
+ */
+export declare function defaultInjectedEvmProvider(): InjectedEvmProvider | null;

package/dist/auth/providers/injected-wallet-provider.d.ts

@@ -1,5 +1,5 @@
 import type { EVMTransaction, SolTransaction, TransactionResult, User, AuthProvider, SetOptions } from '@bounded-sh/core';
-import { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
 import { defaultInjectedProvider, type InjectedSolanaProvider, type InjectedWalletConfig } from './injected-wallet-types';
 export { defaultInjectedProvider };
 export type { InjectedSolanaProvider, InjectedWalletConfig };

package/dist/auth/providers/offchain-auth-provider.d.ts

@@ -1,6 +1,6 @@
-import { AuthProvider, User, TransactionResult, EVMTransaction, SolTransaction } from "@bounded-sh/core";
-import { SetOptions } from "@bounded-sh/core";
-import { Transaction, VersionedTransaction } from "@solana/web3.js";
+import type { AuthProvider, User, TransactionResult, EVMTransaction, SolTransaction } from "@bounded-sh/core";
+import type { SetOptions } from "@bounded-sh/core";
+import type { Transaction, VersionedTransaction } from "@solana/web3.js";
 export interface OffchainAuthProviderConfig {
     onSigningStart?: () => void;
     onSigningComplete?: (signature: string) => void;

package/dist/auth/providers/phantom-wallet-provider.d.ts

@@ -1,5 +1,5 @@
 import type { EVMTransaction, SolTransaction, TransactionResult, User, AuthProvider, SetOptions } from '@bounded-sh/core';
-import { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
 export type PhantomProviderType = 'injected' | 'google' | 'apple' | 'deeplink' | 'phantom';
 export interface PhantomWalletConfig {
     appId?: string;

package/dist/auth/providers/privy-expo-provider.d.ts

@@ -19,7 +19,7 @@
  * to render <PrivyProvider> and then bridge the hooks via setPrivyMethods().
  */
 import type { EVMTransaction, SolTransaction, TransactionResult, AuthProvider, User, SetOptions } from '@bounded-sh/core';
-import { PublicKey, Connection, Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { PublicKey, Connection, Transaction, VersionedTransaction } from '@solana/web3.js';
 export interface PrivyExpoMethods {
     /** Whether Privy SDK is fully initialized. */
     isReady: boolean;

package/dist/auth/providers/privy-wallet-provider.d.ts

@@ -1,5 +1,5 @@
 import type { EVMTransaction, SolTransaction, TransactionResult, AuthProvider, User, SetOptions } from '@bounded-sh/core';
-import { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
 type PrivyWalletConfig = {
     appId: string;
     config: any;

package/dist/auth/providers/sol/sol-utils.d.ts

@@ -1,2 +1,2 @@
-import { Transaction, VersionedTransaction } from "@solana/web3.js";
+import type { Transaction, VersionedTransaction } from "@solana/web3.js";
 export declare function deserializeTransaction(tx: string | Buffer): Promise<Transaction | VersionedTransaction>;

package/dist/auth/providers/transaction-utils.d.ts

@@ -1,4 +1,4 @@
-import { Connection } from '@solana/web3.js';
+import type { Connection } from '@solana/web3.js';
 /**
  * Extracts a human-readable error message from Solana transaction logs.
  */

package/dist/email-auth-provider-CTyjwhLb.mjs

@@ -0,0 +1,99 @@
+import { getActiveSessionManager } from '@bounded-sh/core';
+import { s as setCurrentUser, E as EMBEDDED_WALLET_UNSUPPORTED, h as hasEmbeddedWallet, a as hasEmbeddedEvmWallet, e as embeddedRunEvmTransaction, b as embeddedSignAndSubmit, g as getPlatform } from './index-C0pR5b7j.mjs';
+import 'react';
+
+// Web uses localStorage (WebSessionManager); React Native uses the configured
+// ReactNativeSessionManager. getActiveSessionManager() picks the right one by
+// whether the RN manager was configured (NOT `typeof window`, which is truthy on
+// RN too and would wrongly route to localStorage). Same selector the core
+// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
+const sessionManager = getActiveSessionManager;
+const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
+    'the app policy so email logins get a non-custodial Crossmint wallet ' +
+    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
+    'provider (e.g. Phantom) for onchain actions.';
+// ---------------------------------------------------------------------------
+// token / session helpers
+// ---------------------------------------------------------------------------
+function decodeJwt(token) {
+    try {
+        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');
+        const pad = b64.length % 4;
+        if (pad === 2)
+            b64 += '==';
+        else if (pad === 3)
+            b64 += '=';
+        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).
+        return JSON.parse(getPlatform().atob(b64));
+    }
+    catch (_a) {
+        return {};
+    }
+}
+function userFromIdToken(idToken, fallbackEmail) {
+    const c = decodeJwt(idToken);
+    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
+    const email = (c.email || fallbackEmail || null);
+    // Email logins have no wallet — address is null (the User type allows it).
+    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
+        ? c['custom:evmWalletAddress'].toLowerCase()
+        : null;
+    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+}
+// ---------------------------------------------------------------------------
+// provider
+// ---------------------------------------------------------------------------
+class EmailAuthProvider {
+    async login() {
+        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +
+            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');
+    }
+    async restoreSession() {
+        const sm = sessionManager();
+        const session = await sm.getSession();
+        if (!session)
+            return null;
+        const idToken = sm.getIdToken();
+        if (!idToken)
+            return null;
+        const user = userFromIdToken(idToken);
+        setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        sessionManager().clearSession();
+        setCurrentUser(null);
+    }
+    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
+    // raw signature — signMessage/signTransaction are structurally unsupported
+    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
+    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
+    // Bounded signer popup for wallets-enabled email logins.
+    async signMessage(_message) {
+        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async runTransaction(evm, sol, options) {
+        if (evm && sol)
+            throw new Error('A transaction cannot target EVM and Solana at the same time.');
+        if (!evm)
+            throw new Error(NO_WALLET);
+        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
+            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
+        if (!hasEmbeddedEvmWallet())
+            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
+        return embeddedRunEvmTransaction(evm);
+    }
+    async signTransaction(_t) {
+        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async signAndSubmitTransaction(transaction, _feePayer) {
+        if (!hasEmbeddedWallet())
+            throw new Error(NO_WALLET);
+        return embeddedSignAndSubmit(transaction);
+    }
+    async getNativeMethods() { return {}; }
+}
+const emailProviderSingleton = new EmailAuthProvider();
+
+export { EmailAuthProvider, emailProviderSingleton };
+//# sourceMappingURL=email-auth-provider-CTyjwhLb.mjs.map

package/dist/email-auth-provider-CTyjwhLb.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-CTyjwhLb.mjs","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":[],"mappings":";;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAAC,oBAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAO,yBAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAAC,iBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,qBAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;"}

package/dist/email-auth-provider-CmunfauO.js

@@ -0,0 +1,102 @@
+'use strict';
+
+var core = require('@bounded-sh/core');
+var index_native = require('./index.native-BZCc0gO-.js');
+require('react');
+
+// Web uses localStorage (WebSessionManager); React Native uses the configured
+// ReactNativeSessionManager. getActiveSessionManager() picks the right one by
+// whether the RN manager was configured (NOT `typeof window`, which is truthy on
+// RN too and would wrongly route to localStorage). Same selector the core
+// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
+const sessionManager = core.getActiveSessionManager;
+const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
+    'the app policy so email logins get a non-custodial Crossmint wallet ' +
+    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
+    'provider (e.g. Phantom) for onchain actions.';
+// ---------------------------------------------------------------------------
+// token / session helpers
+// ---------------------------------------------------------------------------
+function decodeJwt(token) {
+    try {
+        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');
+        const pad = b64.length % 4;
+        if (pad === 2)
+            b64 += '==';
+        else if (pad === 3)
+            b64 += '=';
+        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).
+        return JSON.parse(index_native.getPlatform().atob(b64));
+    }
+    catch (_a) {
+        return {};
+    }
+}
+function userFromIdToken(idToken, fallbackEmail) {
+    const c = decodeJwt(idToken);
+    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
+    const email = (c.email || fallbackEmail || null);
+    // Email logins have no wallet — address is null (the User type allows it).
+    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
+        ? c['custom:evmWalletAddress'].toLowerCase()
+        : null;
+    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+}
+// ---------------------------------------------------------------------------
+// provider
+// ---------------------------------------------------------------------------
+class EmailAuthProvider {
+    async login() {
+        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +
+            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');
+    }
+    async restoreSession() {
+        const sm = sessionManager();
+        const session = await sm.getSession();
+        if (!session)
+            return null;
+        const idToken = sm.getIdToken();
+        if (!idToken)
+            return null;
+        const user = userFromIdToken(idToken);
+        index_native.setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        sessionManager().clearSession();
+        index_native.setCurrentUser(null);
+    }
+    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
+    // raw signature — signMessage/signTransaction are structurally unsupported
+    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
+    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
+    // Bounded signer popup for wallets-enabled email logins.
+    async signMessage(_message) {
+        throw new Error(index_native.hasEmbeddedWallet() ? index_native.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async runTransaction(evm, sol, options) {
+        if (evm && sol)
+            throw new Error('A transaction cannot target EVM and Solana at the same time.');
+        if (!evm)
+            throw new Error(NO_WALLET);
+        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
+            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
+        if (!index_native.hasEmbeddedEvmWallet())
+            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
+        return index_native.embeddedRunEvmTransaction(evm);
+    }
+    async signTransaction(_t) {
+        throw new Error(index_native.hasEmbeddedWallet() ? index_native.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async signAndSubmitTransaction(transaction, _feePayer) {
+        if (!index_native.hasEmbeddedWallet())
+            throw new Error(NO_WALLET);
+        return index_native.embeddedSignAndSubmit(transaction);
+    }
+    async getNativeMethods() { return {}; }
+}
+const emailProviderSingleton = new EmailAuthProvider();
+
+exports.EmailAuthProvider = EmailAuthProvider;
+exports.emailProviderSingleton = emailProviderSingleton;
+//# sourceMappingURL=email-auth-provider-CmunfauO.js.map

package/dist/email-auth-provider-CmunfauO.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-CmunfauO.js","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":["getActiveSessionManager","getPlatform","setCurrentUser","hasEmbeddedWallet","EMBEDDED_WALLET_UNSUPPORTED","hasEmbeddedEvmWallet","embeddedRunEvmTransaction","embeddedSignAndSubmit"],"mappings":";;;;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAGA,4BAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAACC,wBAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQA,2BAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAACC,8BAAiB,EAAE,GAAGC,wCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAACC,iCAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAOC,sCAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAACH,8BAAiB,EAAE,GAAGC,wCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAACD,8BAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOI,kCAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;;"}

package/dist/email-auth-provider-DyxZTpx6.js

@@ -0,0 +1,102 @@
+'use strict';
+
+var core = require('@bounded-sh/core');
+var index = require('./index-JBeYYsGm.js');
+require('react');
+
+// Web uses localStorage (WebSessionManager); React Native uses the configured
+// ReactNativeSessionManager. getActiveSessionManager() picks the right one by
+// whether the RN manager was configured (NOT `typeof window`, which is truthy on
+// RN too and would wrongly route to localStorage). Same selector the core
+// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
+const sessionManager = core.getActiveSessionManager;
+const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
+    'the app policy so email logins get a non-custodial Crossmint wallet ' +
+    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
+    'provider (e.g. Phantom) for onchain actions.';
+// ---------------------------------------------------------------------------
+// token / session helpers
+// ---------------------------------------------------------------------------
+function decodeJwt(token) {
+    try {
+        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');
+        const pad = b64.length % 4;
+        if (pad === 2)
+            b64 += '==';
+        else if (pad === 3)
+            b64 += '=';
+        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).
+        return JSON.parse(index.getPlatform().atob(b64));
+    }
+    catch (_a) {
+        return {};
+    }
+}
+function userFromIdToken(idToken, fallbackEmail) {
+    const c = decodeJwt(idToken);
+    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
+    const email = (c.email || fallbackEmail || null);
+    // Email logins have no wallet — address is null (the User type allows it).
+    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
+        ? c['custom:evmWalletAddress'].toLowerCase()
+        : null;
+    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+}
+// ---------------------------------------------------------------------------
+// provider
+// ---------------------------------------------------------------------------
+class EmailAuthProvider {
+    async login() {
+        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +
+            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');
+    }
+    async restoreSession() {
+        const sm = sessionManager();
+        const session = await sm.getSession();
+        if (!session)
+            return null;
+        const idToken = sm.getIdToken();
+        if (!idToken)
+            return null;
+        const user = userFromIdToken(idToken);
+        index.setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        sessionManager().clearSession();
+        index.setCurrentUser(null);
+    }
+    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
+    // raw signature — signMessage/signTransaction are structurally unsupported
+    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
+    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
+    // Bounded signer popup for wallets-enabled email logins.
+    async signMessage(_message) {
+        throw new Error(index.hasEmbeddedWallet() ? index.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async runTransaction(evm, sol, options) {
+        if (evm && sol)
+            throw new Error('A transaction cannot target EVM and Solana at the same time.');
+        if (!evm)
+            throw new Error(NO_WALLET);
+        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
+            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
+        if (!index.hasEmbeddedEvmWallet())
+            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
+        return index.embeddedRunEvmTransaction(evm);
+    }
+    async signTransaction(_t) {
+        throw new Error(index.hasEmbeddedWallet() ? index.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async signAndSubmitTransaction(transaction, _feePayer) {
+        if (!index.hasEmbeddedWallet())
+            throw new Error(NO_WALLET);
+        return index.embeddedSignAndSubmit(transaction);
+    }
+    async getNativeMethods() { return {}; }
+}
+const emailProviderSingleton = new EmailAuthProvider();
+
+exports.EmailAuthProvider = EmailAuthProvider;
+exports.emailProviderSingleton = emailProviderSingleton;
+//# sourceMappingURL=email-auth-provider-DyxZTpx6.js.map

package/dist/email-auth-provider-DyxZTpx6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-DyxZTpx6.js","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":["getActiveSessionManager","getPlatform","setCurrentUser","hasEmbeddedWallet","EMBEDDED_WALLET_UNSUPPORTED","hasEmbeddedEvmWallet","embeddedRunEvmTransaction","embeddedSignAndSubmit"],"mappings":";;;;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAGA,4BAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAACC,iBAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQA,oBAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAACC,uBAAiB,EAAE,GAAGC,iCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAACC,0BAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAOC,+BAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAACH,uBAAiB,EAAE,GAAGC,iCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAACD,uBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOI,2BAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;;"}