@bounded-sh/client 0.0.44 → 0.0.48

package/dist/auth/crossmint-signer-bridge.d.ts

@@ -1,5 +1,5 @@
 import type { EVMTransaction, TransactionResult } from '@bounded-sh/core';
-import { Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { Transaction, VersionedTransaction } from '@solana/web3.js';
 export type SignerAction = {
     kind: 'sendToken';
     recipient: string;

package/dist/auth/index.d.ts

@@ -1,4 +1,4 @@
-import { AuthProvider, User, ClientConfig } from "@bounded-sh/core";
+import type { AuthProvider, User, ClientConfig } from "@bounded-sh/core";
 /**
  * Clears the session if it was created by a different auth method.
  * Returns true if the session was cleared, false if the session is compatible.

package/dist/auth/providers/email-auth-provider.d.ts

@@ -1,6 +1,5 @@
 import type { AuthProvider, User, TransactionResult, SolTransaction, EVMTransaction, SetOptions } from '@bounded-sh/core';
-import { Transaction, VersionedTransaction } from '@solana/web3.js';
-import { PublicKey } from '@solana/web3.js';
+import type { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
 export declare class EmailAuthProvider implements AuthProvider {
     login(): Promise<User | null>;
     restoreSession(): Promise<User | null>;

package/dist/auth/providers/guest-auth-provider.d.ts

@@ -1,5 +1,5 @@
 import type { AuthProvider, User, TransactionResult, SolTransaction, EVMTransaction, SetOptions } from '@bounded-sh/core';
-import { Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { Transaction, VersionedTransaction } from '@solana/web3.js';
 export declare class GuestAuthProvider implements AuthProvider {
     login(): Promise<User | null>;
     restoreSession(): Promise<User | null>;

package/dist/auth/providers/injected-wallet-provider.d.ts

@@ -1,5 +1,5 @@
 import type { EVMTransaction, SolTransaction, TransactionResult, User, AuthProvider, SetOptions } from '@bounded-sh/core';
-import { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
 import { defaultInjectedProvider, type InjectedSolanaProvider, type InjectedWalletConfig } from './injected-wallet-types';
 export { defaultInjectedProvider };
 export type { InjectedSolanaProvider, InjectedWalletConfig };

package/dist/auth/providers/offchain-auth-provider.d.ts

@@ -1,6 +1,6 @@
-import { AuthProvider, User, TransactionResult, EVMTransaction, SolTransaction } from "@bounded-sh/core";
-import { SetOptions } from "@bounded-sh/core";
-import { Transaction, VersionedTransaction } from "@solana/web3.js";
+import type { AuthProvider, User, TransactionResult, EVMTransaction, SolTransaction } from "@bounded-sh/core";
+import type { SetOptions } from "@bounded-sh/core";
+import type { Transaction, VersionedTransaction } from "@solana/web3.js";
 export interface OffchainAuthProviderConfig {
     onSigningStart?: () => void;
     onSigningComplete?: (signature: string) => void;

package/dist/auth/providers/phantom-wallet-provider.d.ts

@@ -1,5 +1,5 @@
 import type { EVMTransaction, SolTransaction, TransactionResult, User, AuthProvider, SetOptions } from '@bounded-sh/core';
-import { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
 export type PhantomProviderType = 'injected' | 'google' | 'apple' | 'deeplink' | 'phantom';
 export interface PhantomWalletConfig {
     appId?: string;

package/dist/auth/providers/privy-expo-provider.d.ts

@@ -19,7 +19,7 @@
  * to render <PrivyProvider> and then bridge the hooks via setPrivyMethods().
  */
 import type { EVMTransaction, SolTransaction, TransactionResult, AuthProvider, User, SetOptions } from '@bounded-sh/core';
-import { PublicKey, Connection, Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { PublicKey, Connection, Transaction, VersionedTransaction } from '@solana/web3.js';
 export interface PrivyExpoMethods {
     /** Whether Privy SDK is fully initialized. */
     isReady: boolean;

package/dist/auth/providers/privy-wallet-provider.d.ts

@@ -1,5 +1,5 @@
 import type { EVMTransaction, SolTransaction, TransactionResult, AuthProvider, User, SetOptions } from '@bounded-sh/core';
-import { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
+import type { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
 type PrivyWalletConfig = {
     appId: string;
     config: any;

package/dist/auth/providers/sol/sol-utils.d.ts

@@ -1,2 +1,2 @@
-import { Transaction, VersionedTransaction } from "@solana/web3.js";
+import type { Transaction, VersionedTransaction } from "@solana/web3.js";
 export declare function deserializeTransaction(tx: string | Buffer): Promise<Transaction | VersionedTransaction>;

package/dist/auth/providers/transaction-utils.d.ts

@@ -1,4 +1,4 @@
-import { Connection } from '@solana/web3.js';
+import type { Connection } from '@solana/web3.js';
 /**
  * Extracts a human-readable error message from Solana transaction logs.
  */

package/dist/email-auth-provider-CTyjwhLb.mjs

@@ -0,0 +1,99 @@
+import { getActiveSessionManager } from '@bounded-sh/core';
+import { s as setCurrentUser, E as EMBEDDED_WALLET_UNSUPPORTED, h as hasEmbeddedWallet, a as hasEmbeddedEvmWallet, e as embeddedRunEvmTransaction, b as embeddedSignAndSubmit, g as getPlatform } from './index-C0pR5b7j.mjs';
+import 'react';
+
+// Web uses localStorage (WebSessionManager); React Native uses the configured
+// ReactNativeSessionManager. getActiveSessionManager() picks the right one by
+// whether the RN manager was configured (NOT `typeof window`, which is truthy on
+// RN too and would wrongly route to localStorage). Same selector the core
+// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
+const sessionManager = getActiveSessionManager;
+const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
+    'the app policy so email logins get a non-custodial Crossmint wallet ' +
+    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
+    'provider (e.g. Phantom) for onchain actions.';
+// ---------------------------------------------------------------------------
+// token / session helpers
+// ---------------------------------------------------------------------------
+function decodeJwt(token) {
+    try {
+        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');
+        const pad = b64.length % 4;
+        if (pad === 2)
+            b64 += '==';
+        else if (pad === 3)
+            b64 += '=';
+        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).
+        return JSON.parse(getPlatform().atob(b64));
+    }
+    catch (_a) {
+        return {};
+    }
+}
+function userFromIdToken(idToken, fallbackEmail) {
+    const c = decodeJwt(idToken);
+    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
+    const email = (c.email || fallbackEmail || null);
+    // Email logins have no wallet — address is null (the User type allows it).
+    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
+        ? c['custom:evmWalletAddress'].toLowerCase()
+        : null;
+    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+}
+// ---------------------------------------------------------------------------
+// provider
+// ---------------------------------------------------------------------------
+class EmailAuthProvider {
+    async login() {
+        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +
+            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');
+    }
+    async restoreSession() {
+        const sm = sessionManager();
+        const session = await sm.getSession();
+        if (!session)
+            return null;
+        const idToken = sm.getIdToken();
+        if (!idToken)
+            return null;
+        const user = userFromIdToken(idToken);
+        setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        sessionManager().clearSession();
+        setCurrentUser(null);
+    }
+    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
+    // raw signature — signMessage/signTransaction are structurally unsupported
+    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
+    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
+    // Bounded signer popup for wallets-enabled email logins.
+    async signMessage(_message) {
+        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async runTransaction(evm, sol, options) {
+        if (evm && sol)
+            throw new Error('A transaction cannot target EVM and Solana at the same time.');
+        if (!evm)
+            throw new Error(NO_WALLET);
+        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
+            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
+        if (!hasEmbeddedEvmWallet())
+            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
+        return embeddedRunEvmTransaction(evm);
+    }
+    async signTransaction(_t) {
+        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async signAndSubmitTransaction(transaction, _feePayer) {
+        if (!hasEmbeddedWallet())
+            throw new Error(NO_WALLET);
+        return embeddedSignAndSubmit(transaction);
+    }
+    async getNativeMethods() { return {}; }
+}
+const emailProviderSingleton = new EmailAuthProvider();
+
+export { EmailAuthProvider, emailProviderSingleton };
+//# sourceMappingURL=email-auth-provider-CTyjwhLb.mjs.map

package/dist/email-auth-provider-CTyjwhLb.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-CTyjwhLb.mjs","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":[],"mappings":";;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAAC,oBAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAO,yBAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAAC,iBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,qBAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;"}

package/dist/email-auth-provider-CmunfauO.js

@@ -0,0 +1,102 @@
+'use strict';
+
+var core = require('@bounded-sh/core');
+var index_native = require('./index.native-BZCc0gO-.js');
+require('react');
+
+// Web uses localStorage (WebSessionManager); React Native uses the configured
+// ReactNativeSessionManager. getActiveSessionManager() picks the right one by
+// whether the RN manager was configured (NOT `typeof window`, which is truthy on
+// RN too and would wrongly route to localStorage). Same selector the core
+// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
+const sessionManager = core.getActiveSessionManager;
+const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
+    'the app policy so email logins get a non-custodial Crossmint wallet ' +
+    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
+    'provider (e.g. Phantom) for onchain actions.';
+// ---------------------------------------------------------------------------
+// token / session helpers
+// ---------------------------------------------------------------------------
+function decodeJwt(token) {
+    try {
+        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');
+        const pad = b64.length % 4;
+        if (pad === 2)
+            b64 += '==';
+        else if (pad === 3)
+            b64 += '=';
+        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).
+        return JSON.parse(index_native.getPlatform().atob(b64));
+    }
+    catch (_a) {
+        return {};
+    }
+}
+function userFromIdToken(idToken, fallbackEmail) {
+    const c = decodeJwt(idToken);
+    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
+    const email = (c.email || fallbackEmail || null);
+    // Email logins have no wallet — address is null (the User type allows it).
+    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
+        ? c['custom:evmWalletAddress'].toLowerCase()
+        : null;
+    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+}
+// ---------------------------------------------------------------------------
+// provider
+// ---------------------------------------------------------------------------
+class EmailAuthProvider {
+    async login() {
+        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +
+            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');
+    }
+    async restoreSession() {
+        const sm = sessionManager();
+        const session = await sm.getSession();
+        if (!session)
+            return null;
+        const idToken = sm.getIdToken();
+        if (!idToken)
+            return null;
+        const user = userFromIdToken(idToken);
+        index_native.setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        sessionManager().clearSession();
+        index_native.setCurrentUser(null);
+    }
+    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
+    // raw signature — signMessage/signTransaction are structurally unsupported
+    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
+    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
+    // Bounded signer popup for wallets-enabled email logins.
+    async signMessage(_message) {
+        throw new Error(index_native.hasEmbeddedWallet() ? index_native.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async runTransaction(evm, sol, options) {
+        if (evm && sol)
+            throw new Error('A transaction cannot target EVM and Solana at the same time.');
+        if (!evm)
+            throw new Error(NO_WALLET);
+        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
+            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
+        if (!index_native.hasEmbeddedEvmWallet())
+            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
+        return index_native.embeddedRunEvmTransaction(evm);
+    }
+    async signTransaction(_t) {
+        throw new Error(index_native.hasEmbeddedWallet() ? index_native.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async signAndSubmitTransaction(transaction, _feePayer) {
+        if (!index_native.hasEmbeddedWallet())
+            throw new Error(NO_WALLET);
+        return index_native.embeddedSignAndSubmit(transaction);
+    }
+    async getNativeMethods() { return {}; }
+}
+const emailProviderSingleton = new EmailAuthProvider();
+
+exports.EmailAuthProvider = EmailAuthProvider;
+exports.emailProviderSingleton = emailProviderSingleton;
+//# sourceMappingURL=email-auth-provider-CmunfauO.js.map

package/dist/email-auth-provider-CmunfauO.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-CmunfauO.js","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":["getActiveSessionManager","getPlatform","setCurrentUser","hasEmbeddedWallet","EMBEDDED_WALLET_UNSUPPORTED","hasEmbeddedEvmWallet","embeddedRunEvmTransaction","embeddedSignAndSubmit"],"mappings":";;;;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAGA,4BAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAACC,wBAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQA,2BAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAACC,8BAAiB,EAAE,GAAGC,wCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAACC,iCAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAOC,sCAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAACH,8BAAiB,EAAE,GAAGC,wCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAACD,8BAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOI,kCAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;;"}

package/dist/email-auth-provider-DyxZTpx6.js

@@ -0,0 +1,102 @@
+'use strict';
+
+var core = require('@bounded-sh/core');
+var index = require('./index-JBeYYsGm.js');
+require('react');
+
+// Web uses localStorage (WebSessionManager); React Native uses the configured
+// ReactNativeSessionManager. getActiveSessionManager() picks the right one by
+// whether the RN manager was configured (NOT `typeof window`, which is truthy on
+// RN too and would wrongly route to localStorage). Same selector the core
+// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
+const sessionManager = core.getActiveSessionManager;
+const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
+    'the app policy so email logins get a non-custodial Crossmint wallet ' +
+    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
+    'provider (e.g. Phantom) for onchain actions.';
+// ---------------------------------------------------------------------------
+// token / session helpers
+// ---------------------------------------------------------------------------
+function decodeJwt(token) {
+    try {
+        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');
+        const pad = b64.length % 4;
+        if (pad === 2)
+            b64 += '==';
+        else if (pad === 3)
+            b64 += '=';
+        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).
+        return JSON.parse(index.getPlatform().atob(b64));
+    }
+    catch (_a) {
+        return {};
+    }
+}
+function userFromIdToken(idToken, fallbackEmail) {
+    const c = decodeJwt(idToken);
+    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
+    const email = (c.email || fallbackEmail || null);
+    // Email logins have no wallet — address is null (the User type allows it).
+    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
+        ? c['custom:evmWalletAddress'].toLowerCase()
+        : null;
+    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+}
+// ---------------------------------------------------------------------------
+// provider
+// ---------------------------------------------------------------------------
+class EmailAuthProvider {
+    async login() {
+        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +
+            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');
+    }
+    async restoreSession() {
+        const sm = sessionManager();
+        const session = await sm.getSession();
+        if (!session)
+            return null;
+        const idToken = sm.getIdToken();
+        if (!idToken)
+            return null;
+        const user = userFromIdToken(idToken);
+        index.setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        sessionManager().clearSession();
+        index.setCurrentUser(null);
+    }
+    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
+    // raw signature — signMessage/signTransaction are structurally unsupported
+    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
+    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
+    // Bounded signer popup for wallets-enabled email logins.
+    async signMessage(_message) {
+        throw new Error(index.hasEmbeddedWallet() ? index.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async runTransaction(evm, sol, options) {
+        if (evm && sol)
+            throw new Error('A transaction cannot target EVM and Solana at the same time.');
+        if (!evm)
+            throw new Error(NO_WALLET);
+        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
+            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
+        if (!index.hasEmbeddedEvmWallet())
+            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
+        return index.embeddedRunEvmTransaction(evm);
+    }
+    async signTransaction(_t) {
+        throw new Error(index.hasEmbeddedWallet() ? index.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async signAndSubmitTransaction(transaction, _feePayer) {
+        if (!index.hasEmbeddedWallet())
+            throw new Error(NO_WALLET);
+        return index.embeddedSignAndSubmit(transaction);
+    }
+    async getNativeMethods() { return {}; }
+}
+const emailProviderSingleton = new EmailAuthProvider();
+
+exports.EmailAuthProvider = EmailAuthProvider;
+exports.emailProviderSingleton = emailProviderSingleton;
+//# sourceMappingURL=email-auth-provider-DyxZTpx6.js.map

package/dist/email-auth-provider-DyxZTpx6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-DyxZTpx6.js","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":["getActiveSessionManager","getPlatform","setCurrentUser","hasEmbeddedWallet","EMBEDDED_WALLET_UNSUPPORTED","hasEmbeddedEvmWallet","embeddedRunEvmTransaction","embeddedSignAndSubmit"],"mappings":";;;;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAGA,4BAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAACC,iBAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQA,oBAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAACC,uBAAiB,EAAE,GAAGC,iCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAACC,0BAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAOC,+BAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAACH,uBAAiB,EAAE,GAAGC,iCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAACD,uBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOI,2BAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;;"}

package/dist/email-auth-provider-GRj8IOg2.mjs

@@ -0,0 +1,99 @@
+import { getActiveSessionManager } from '@bounded-sh/core';
+import { s as setCurrentUser, E as EMBEDDED_WALLET_UNSUPPORTED, h as hasEmbeddedWallet, a as hasEmbeddedEvmWallet, e as embeddedRunEvmTransaction, b as embeddedSignAndSubmit, g as getPlatform } from './index.native-CytJPNQV.mjs';
+import 'react';
+
+// Web uses localStorage (WebSessionManager); React Native uses the configured
+// ReactNativeSessionManager. getActiveSessionManager() picks the right one by
+// whether the RN manager was configured (NOT `typeof window`, which is truthy on
+// RN too and would wrongly route to localStorage). Same selector the core
+// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
+const sessionManager = getActiveSessionManager;
+const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
+    'the app policy so email logins get a non-custodial Crossmint wallet ' +
+    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
+    'provider (e.g. Phantom) for onchain actions.';
+// ---------------------------------------------------------------------------
+// token / session helpers
+// ---------------------------------------------------------------------------
+function decodeJwt(token) {
+    try {
+        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');
+        const pad = b64.length % 4;
+        if (pad === 2)
+            b64 += '==';
+        else if (pad === 3)
+            b64 += '=';
+        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).
+        return JSON.parse(getPlatform().atob(b64));
+    }
+    catch (_a) {
+        return {};
+    }
+}
+function userFromIdToken(idToken, fallbackEmail) {
+    const c = decodeJwt(idToken);
+    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
+    const email = (c.email || fallbackEmail || null);
+    // Email logins have no wallet — address is null (the User type allows it).
+    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
+        ? c['custom:evmWalletAddress'].toLowerCase()
+        : null;
+    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+}
+// ---------------------------------------------------------------------------
+// provider
+// ---------------------------------------------------------------------------
+class EmailAuthProvider {
+    async login() {
+        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +
+            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');
+    }
+    async restoreSession() {
+        const sm = sessionManager();
+        const session = await sm.getSession();
+        if (!session)
+            return null;
+        const idToken = sm.getIdToken();
+        if (!idToken)
+            return null;
+        const user = userFromIdToken(idToken);
+        setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        sessionManager().clearSession();
+        setCurrentUser(null);
+    }
+    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
+    // raw signature — signMessage/signTransaction are structurally unsupported
+    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
+    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
+    // Bounded signer popup for wallets-enabled email logins.
+    async signMessage(_message) {
+        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async runTransaction(evm, sol, options) {
+        if (evm && sol)
+            throw new Error('A transaction cannot target EVM and Solana at the same time.');
+        if (!evm)
+            throw new Error(NO_WALLET);
+        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
+            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
+        if (!hasEmbeddedEvmWallet())
+            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
+        return embeddedRunEvmTransaction(evm);
+    }
+    async signTransaction(_t) {
+        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    }
+    async signAndSubmitTransaction(transaction, _feePayer) {
+        if (!hasEmbeddedWallet())
+            throw new Error(NO_WALLET);
+        return embeddedSignAndSubmit(transaction);
+    }
+    async getNativeMethods() { return {}; }
+}
+const emailProviderSingleton = new EmailAuthProvider();
+
+export { EmailAuthProvider, emailProviderSingleton };
+//# sourceMappingURL=email-auth-provider-GRj8IOg2.mjs.map

package/dist/email-auth-provider-GRj8IOg2.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-GRj8IOg2.mjs","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":[],"mappings":";;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAAC,oBAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAO,yBAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAAC,iBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,qBAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;"}