@bounded-sh/client 0.0.44 → 0.0.48

package/dist/guest-auth-provider-B68XT2lU.js

@@ -0,0 +1,193 @@
+'use strict';
+
+var core = require('@bounded-sh/core');
+var index_native = require('./index.native-BZCc0gO-.js');
+require('react');
+
+// guest-keystore.ts — durable per-device keypair for anonymous ("guest") auth.
+//
+// A guest is an ed25519 keypair generated on the device. Its public key is the
+// Bounded account address; it signs the auth challenge exactly like a wallet.
+//
+// Guest auth has one backend: WebCrypto Ed25519 + IndexedDB. The key is
+// NON-EXTRACTABLE: an XSS can ask it to sign but can never read the private
+// bytes. If WebCrypto or IndexedDB is unavailable, guest auth fails closed
+// instead of silently creating an extractable/stored-secret credential.
+//
+// The public output is a base58 address + a base64
+// detached signature, which is the format the session endpoint already accepts.
+const LEGACY_STORED_SECRET_KEY = 'bounded_guest_key_v1';
+const IDB_NAME = 'bounded-guest';
+const IDB_STORE = 'keys';
+const IDB_KEY = 'ed25519';
+const GUEST_KEY_REQUIREMENT = 'Guest auth requires non-extractable WebCrypto Ed25519 keys persisted in IndexedDB; ' +
+    'stored-secret guest credentials are disabled.';
+function toBase64(bytes) {
+    let bin = '';
+    for (let i = 0; i < bytes.length; i++)
+        bin += String.fromCharCode(bytes[i]);
+    // btoa exists in browsers + RN (Hermes) ; Buffer is the Node/SSR fallback.
+    return typeof btoa !== 'undefined' ? btoa(bin) : Buffer.from(bytes).toString('base64');
+}
+// ----- WebCrypto (non-extractable) backend -----------------------------------
+function subtle() {
+    const c = globalThis === null || globalThis === void 0 ? void 0 : globalThis.crypto;
+    return c && c.subtle ? c.subtle : null;
+}
+function idb() {
+    return new Promise((resolve, reject) => {
+        const req = globalThis.indexedDB.open(IDB_NAME, 1);
+        req.onupgradeneeded = () => req.result.createObjectStore(IDB_STORE);
+        req.onsuccess = () => resolve(req.result);
+        req.onerror = () => reject(req.error);
+    });
+}
+function idbGet(db, key) {
+    return new Promise((resolve, reject) => {
+        const r = db.transaction(IDB_STORE, 'readonly').objectStore(IDB_STORE).get(key);
+        r.onsuccess = () => resolve(r.result);
+        r.onerror = () => reject(r.error);
+    });
+}
+function idbPut(db, key, val) {
+    return new Promise((resolve, reject) => {
+        const r = db.transaction(IDB_STORE, 'readwrite').objectStore(IDB_STORE).put(val, key);
+        r.onsuccess = () => resolve();
+        r.onerror = () => reject(r.error);
+    });
+}
+function guestKeyUnavailable(cause) {
+    const detail = cause instanceof Error && cause.message ? ` Cause: ${cause.message}` : '';
+    return new Error(`${GUEST_KEY_REQUIREMENT}${detail}`);
+}
+async function webCryptoKey() {
+    const s = subtle();
+    if (!s)
+        throw guestKeyUnavailable(new Error('WebCrypto subtle crypto is unavailable.'));
+    if (typeof globalThis.indexedDB === 'undefined') {
+        throw guestKeyUnavailable(new Error('IndexedDB is unavailable.'));
+    }
+    try {
+        const db = await idb();
+        let pair = (await idbGet(db, IDB_KEY));
+        if (!pair) {
+            // Probe Ed25519 support by generating (throws on unsupported engines).
+            pair = (await s.generateKey({ name: 'Ed25519' }, /* extractable */ false, [
+                'sign',
+                'verify',
+            ]));
+            await idbPut(db, IDB_KEY, pair); // CryptoKey is structured-cloneable; bytes never exposed
+        }
+        const raw = new Uint8Array(await s.exportKey('raw', pair.publicKey)); // public is exportable
+        const address = index_native.bs58.encode(raw);
+        return {
+            address,
+            nonExtractable: true,
+            async sign(message) {
+                const data = new TextEncoder().encode(message);
+                const sig = new Uint8Array(await s.sign({ name: 'Ed25519' }, pair.privateKey, data));
+                return toBase64(sig);
+            },
+        };
+    }
+    catch (error) {
+        throw guestKeyUnavailable(error);
+    }
+}
+let cached = null;
+/** Get (or create) this device's durable guest key. */
+async function getGuestKey() {
+    if (cached)
+        return cached;
+    cached = await webCryptoKey();
+    return cached;
+}
+/** Forget the guest key on this device (a fresh signInAnonymously mints a new one). */
+async function clearGuestKey() {
+    cached = null;
+    try {
+        index_native.getPlatform().storage.removeItem(LEGACY_STORED_SECRET_KEY);
+    }
+    catch (_a) { }
+    try {
+        if (typeof globalThis.indexedDB !== 'undefined') {
+            const db = await idb();
+            await new Promise((res) => {
+                const r = db.transaction(IDB_STORE, 'readwrite').objectStore(IDB_STORE).delete(IDB_KEY);
+                r.onsuccess = () => res();
+                r.onerror = () => res();
+            });
+        }
+    }
+    catch (_b) { }
+}
+
+const GUEST_TX_UNSUPPORTED = 'Guest (anonymous) auth is offchain-only — it cannot sign or submit Solana transactions. ' +
+    'Use a wallet provider for onchain actions.';
+class GuestAuthProvider {
+    async login() {
+        index_native.setAuthLoading(true);
+        try {
+            const key = await getGuestKey();
+            // Reuse a still-valid session for this exact guest.
+            const existing = await core.getActiveSessionManager().getSession();
+            if (existing && existing.address === key.address) {
+                const user = { address: key.address, isAnonymous: true, provider: this };
+                index_native.setCurrentUser(user);
+                return user;
+            }
+            // Mint a fresh session: nonce -> canonical message -> local signature.
+            const nonce = await core.genAuthNonce();
+            const message = await core.genSolanaMessage(key.address, nonce);
+            const signature = await key.sign(message); // base64 detached ed25519
+            const result = await core.createSessionWithSignature(key.address, message, signature);
+            await core.getActiveSessionManager().storeSession(key.address, result.accessToken, result.idToken, result.refreshToken);
+            const user = { address: key.address, isAnonymous: true, provider: this };
+            index_native.setCurrentUser(user);
+            return user;
+        }
+        finally {
+            index_native.setAuthLoading(false);
+        }
+    }
+    async restoreSession() {
+        const session = await core.getActiveSessionManager().getSession();
+        if (!session)
+            return null;
+        const user = { address: session.address, isAnonymous: true, provider: this };
+        index_native.setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        // Clears the SESSION but keeps the device key, so logging back in returns the
+        // SAME guest identity (and its data). Use forgetGuest() to wipe the key too.
+        core.getActiveSessionManager().clearSession();
+        index_native.setCurrentUser(null);
+    }
+    /** Wipe the device key — the next login() is a brand-new guest identity. */
+    async forgetGuest() {
+        core.getActiveSessionManager().clearSession();
+        await clearGuestKey();
+        index_native.setCurrentUser(null);
+    }
+    async signMessage(message) {
+        const key = await getGuestKey();
+        return key.sign(message);
+    }
+    // --- offchain guest: no Solana transaction surface -------------------------
+    async runTransaction(_evm, _sol, _options) {
+        throw new Error(GUEST_TX_UNSUPPORTED);
+    }
+    async signTransaction(_t) {
+        throw new Error(GUEST_TX_UNSUPPORTED);
+    }
+    async signAndSubmitTransaction() {
+        throw new Error(GUEST_TX_UNSUPPORTED);
+    }
+    async getNativeMethods() {
+        return {};
+    }
+}
+
+exports.GuestAuthProvider = GuestAuthProvider;
+//# sourceMappingURL=guest-auth-provider-B68XT2lU.js.map

package/dist/guest-auth-provider-B68XT2lU.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-auth-provider-B68XT2lU.js","sources":["../.rollup-tmp/auth/providers/guest-keystore.js","../.rollup-tmp/auth/providers/guest-auth-provider.js"],"sourcesContent":["// guest-keystore.ts — durable per-device keypair for anonymous (\"guest\") auth.\n//\n// A guest is an ed25519 keypair generated on the device. Its public key is the\n// Bounded account address; it signs the auth challenge exactly like a wallet.\n//\n// Guest auth has one backend: WebCrypto Ed25519 + IndexedDB. The key is\n// NON-EXTRACTABLE: an XSS can ask it to sign but can never read the private\n// bytes. If WebCrypto or IndexedDB is unavailable, guest auth fails closed\n// instead of silently creating an extractable/stored-secret credential.\n//\n// The public output is a base58 address + a base64\n// detached signature, which is the format the session endpoint already accepts.\nimport bs58 from 'bs58';\nimport { getPlatform } from '../../platform';\nconst LEGACY_STORED_SECRET_KEY = 'bounded_guest_key_v1';\nconst IDB_NAME = 'bounded-guest';\nconst IDB_STORE = 'keys';\nconst IDB_KEY = 'ed25519';\nconst GUEST_KEY_REQUIREMENT = 'Guest auth requires non-extractable WebCrypto Ed25519 keys persisted in IndexedDB; ' +\n    'stored-secret guest credentials are disabled.';\nfunction toBase64(bytes) {\n    let bin = '';\n    for (let i = 0; i < bytes.length; i++)\n        bin += String.fromCharCode(bytes[i]);\n    // btoa exists in browsers + RN (Hermes) ; Buffer is the Node/SSR fallback.\n    return typeof btoa !== 'undefined' ? btoa(bin) : Buffer.from(bytes).toString('base64');\n}\n// ----- WebCrypto (non-extractable) backend -----------------------------------\nfunction subtle() {\n    const c = globalThis === null || globalThis === void 0 ? void 0 : globalThis.crypto;\n    return c && c.subtle ? c.subtle : null;\n}\nfunction idb() {\n    return new Promise((resolve, reject) => {\n        const req = globalThis.indexedDB.open(IDB_NAME, 1);\n        req.onupgradeneeded = () => req.result.createObjectStore(IDB_STORE);\n        req.onsuccess = () => resolve(req.result);\n        req.onerror = () => reject(req.error);\n    });\n}\nfunction idbGet(db, key) {\n    return new Promise((resolve, reject) => {\n        const r = db.transaction(IDB_STORE, 'readonly').objectStore(IDB_STORE).get(key);\n        r.onsuccess = () => resolve(r.result);\n        r.onerror = () => reject(r.error);\n    });\n}\nfunction idbPut(db, key, val) {\n    return new Promise((resolve, reject) => {\n        const r = db.transaction(IDB_STORE, 'readwrite').objectStore(IDB_STORE).put(val, key);\n        r.onsuccess = () => resolve();\n        r.onerror = () => reject(r.error);\n    });\n}\nfunction guestKeyUnavailable(cause) {\n    const detail = cause instanceof Error && cause.message ? ` Cause: ${cause.message}` : '';\n    return new Error(`${GUEST_KEY_REQUIREMENT}${detail}`);\n}\nasync function webCryptoKey() {\n    const s = subtle();\n    if (!s)\n        throw guestKeyUnavailable(new Error('WebCrypto subtle crypto is unavailable.'));\n    if (typeof globalThis.indexedDB === 'undefined') {\n        throw guestKeyUnavailable(new Error('IndexedDB is unavailable.'));\n    }\n    try {\n        const db = await idb();\n        let pair = (await idbGet(db, IDB_KEY));\n        if (!pair) {\n            // Probe Ed25519 support by generating (throws on unsupported engines).\n            pair = (await s.generateKey({ name: 'Ed25519' }, /* extractable */ false, [\n                'sign',\n                'verify',\n            ]));\n            await idbPut(db, IDB_KEY, pair); // CryptoKey is structured-cloneable; bytes never exposed\n        }\n        const raw = new Uint8Array(await s.exportKey('raw', pair.publicKey)); // public is exportable\n        const address = bs58.encode(raw);\n        return {\n            address,\n            nonExtractable: true,\n            async sign(message) {\n                const data = new TextEncoder().encode(message);\n                const sig = new Uint8Array(await s.sign({ name: 'Ed25519' }, pair.privateKey, data));\n                return toBase64(sig);\n            },\n        };\n    }\n    catch (error) {\n        throw guestKeyUnavailable(error);\n    }\n}\nlet cached = null;\n/** Get (or create) this device's durable guest key. */\nexport async function getGuestKey() {\n    if (cached)\n        return cached;\n    cached = await webCryptoKey();\n    return cached;\n}\n/** Forget the guest key on this device (a fresh signInAnonymously mints a new one). */\nexport async function clearGuestKey() {\n    cached = null;\n    try {\n        getPlatform().storage.removeItem(LEGACY_STORED_SECRET_KEY);\n    }\n    catch (_a) { }\n    try {\n        if (typeof globalThis.indexedDB !== 'undefined') {\n            const db = await idb();\n            await new Promise((res) => {\n                const r = db.transaction(IDB_STORE, 'readwrite').objectStore(IDB_STORE).delete(IDB_KEY);\n                r.onsuccess = () => res();\n                r.onerror = () => res();\n            });\n        }\n    }\n    catch (_b) { }\n}\n","import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSolanaMessage, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { getGuestKey, clearGuestKey } from './guest-keystore';\nconst GUEST_TX_UNSUPPORTED = 'Guest (anonymous) auth is offchain-only — it cannot sign or submit Solana transactions. ' +\n    'Use a wallet provider for onchain actions.';\nexport class GuestAuthProvider {\n    async login() {\n        setAuthLoading(true);\n        try {\n            const key = await getGuestKey();\n            // Reuse a still-valid session for this exact guest.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === key.address) {\n                const user = { address: key.address, isAnonymous: true, provider: this };\n                setCurrentUser(user);\n                return user;\n            }\n            // Mint a fresh session: nonce -> canonical message -> local signature.\n            const nonce = await genAuthNonce();\n            const message = await genSolanaMessage(key.address, nonce);\n            const signature = await key.sign(message); // base64 detached ed25519\n            const result = await createSessionWithSignature(key.address, message, signature);\n            await SessionManager().storeSession(key.address, result.accessToken, result.idToken, result.refreshToken);\n            const user = { address: key.address, isAnonymous: true, provider: this };\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    async restoreSession() {\n        const session = await SessionManager().getSession();\n        if (!session)\n            return null;\n        const user = { address: session.address, isAnonymous: true, provider: this };\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // Clears the SESSION but keeps the device key, so logging back in returns the\n        // SAME guest identity (and its data). Use forgetGuest() to wipe the key too.\n        SessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    /** Wipe the device key — the next login() is a brand-new guest identity. */\n    async forgetGuest() {\n        SessionManager().clearSession();\n        await clearGuestKey();\n        setCurrentUser(null);\n    }\n    async signMessage(message) {\n        const key = await getGuestKey();\n        return key.sign(message);\n    }\n    // --- offchain guest: no Solana transaction surface -------------------------\n    async runTransaction(_evm, _sol, _options) {\n        throw new Error(GUEST_TX_UNSUPPORTED);\n    }\n    async signTransaction(_t) {\n        throw new Error(GUEST_TX_UNSUPPORTED);\n    }\n    async signAndSubmitTransaction() {\n        throw new Error(GUEST_TX_UNSUPPORTED);\n    }\n    async getNativeMethods() {\n        return {};\n    }\n}\n"],"names":["bs58","getPlatform","setAuthLoading","SessionManager","setCurrentUser","genAuthNonce","genSolanaMessage","createSessionWithSignature"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAGA,MAAM,wBAAwB,GAAG,sBAAsB;AACvD,MAAM,QAAQ,GAAG,eAAe;AAChC,MAAM,SAAS,GAAG,MAAM;AACxB,MAAM,OAAO,GAAG,SAAS;AACzB,MAAM,qBAAqB,GAAG,qFAAqF;AACnH,IAAI,+CAA+C;AACnD,SAAS,QAAQ,CAAC,KAAK,EAAE;AACzB,IAAI,IAAI,GAAG,GAAG,EAAE;AAChB,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;AACzC,QAAQ,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5C;AACA,IAAI,OAAO,OAAO,IAAI,KAAK,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAC1F;AACA;AACA,SAAS,MAAM,GAAG;AAClB,IAAI,MAAM,CAAC,GAAG,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC,MAAM;AACvF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI;AAC1C;AACA,SAAS,GAAG,GAAG;AACf,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAC5C,QAAQ,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1D,QAAQ,GAAG,CAAC,eAAe,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC;AAC3E,QAAQ,GAAG,CAAC,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;AACjD,QAAQ,GAAG,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;AAC7C,IAAI,CAAC,CAAC;AACN;AACA,SAAS,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE;AACzB,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAC5C,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;AACvF,QAAQ,CAAC,CAAC,SAAS,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7C,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AACzC,IAAI,CAAC,CAAC;AACN;AACA,SAAS,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;AAC9B,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAC5C,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC;AAC7F,QAAQ,CAAC,CAAC,SAAS,GAAG,MAAM,OAAO,EAAE;AACrC,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AACzC,IAAI,CAAC,CAAC;AACN;AACA,SAAS,mBAAmB,CAAC,KAAK,EAAE;AACpC,IAAI,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE;AAC5F,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACzD;AACA,eAAe,YAAY,GAAG;AAC9B,IAAI,MAAM,CAAC,GAAG,MAAM,EAAE;AACtB,IAAI,IAAI,CAAC,CAAC;AACV,QAAQ,MAAM,mBAAmB,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AACvF,IAAI,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,WAAW,EAAE;AACrD,QAAQ,MAAM,mBAAmB,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;AACzE,IAAI;AACJ,IAAI,IAAI;AACR,QAAQ,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE;AAC9B,QAAQ,IAAI,IAAI,IAAI,MAAM,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AAC9C,QAAQ,IAAI,CAAC,IAAI,EAAE;AACnB;AACA,YAAY,IAAI,IAAI,MAAM,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,oBAAoB,KAAK,EAAE;AACtF,gBAAgB,MAAM;AACtB,gBAAgB,QAAQ;AACxB,aAAa,CAAC,CAAC;AACf,YAAY,MAAM,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5C,QAAQ;AACR,QAAQ,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAC7E,QAAQ,MAAM,OAAO,GAAGA,iBAAI,CAAC,MAAM,CAAC,GAAG,CAAC;AACxC,QAAQ,OAAO;AACf,YAAY,OAAO;AACnB,YAAY,cAAc,EAAE,IAAI;AAChC,YAAY,MAAM,IAAI,CAAC,OAAO,EAAE;AAChC,gBAAgB,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;AAC9D,gBAAgB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AACpG,gBAAgB,OAAO,QAAQ,CAAC,GAAG,CAAC;AACpC,YAAY,CAAC;AACb,SAAS;AACT,IAAI;AACJ,IAAI,OAAO,KAAK,EAAE;AAClB,QAAQ,MAAM,mBAAmB,CAAC,KAAK,CAAC;AACxC,IAAI;AACJ;AACA,IAAI,MAAM,GAAG,IAAI;AACjB;AACO,eAAe,WAAW,GAAG;AACpC,IAAI,IAAI,MAAM;AACd,QAAQ,OAAO,MAAM;AACrB,IAAI,MAAM,GAAG,MAAM,YAAY,EAAE;AACjC,IAAI,OAAO,MAAM;AACjB;AACA;AACO,eAAe,aAAa,GAAG;AACtC,IAAI,MAAM,GAAG,IAAI;AACjB,IAAI,IAAI;AACR,QAAQC,wBAAW,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC;AAClE,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE,EAAE;AACjB,IAAI,IAAI;AACR,QAAQ,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,WAAW,EAAE;AACzD,YAAY,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE;AAClC,YAAY,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK;AACvC,gBAAgB,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACvG,gBAAgB,CAAC,CAAC,SAAS,GAAG,MAAM,GAAG,EAAE;AACzC,gBAAgB,CAAC,CAAC,OAAO,GAAG,MAAM,GAAG,EAAE;AACvC,YAAY,CAAC,CAAC;AACd,QAAQ;AACR,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE,EAAE;AACjB;;ACnHA,MAAM,oBAAoB,GAAG,0FAA0F;AACvH,IAAI,4CAA4C;AACzC,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE;AAC3C;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMC,4BAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE;AAC9D,gBAAgB,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACxF,gBAAgBC,2BAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAMC,iBAAY,EAAE;AAC9C,YAAY,MAAM,OAAO,GAAG,MAAMC,qBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;AACtE,YAAY,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACtD,YAAY,MAAM,MAAM,GAAG,MAAMC,+BAA0B,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;AAC5F,YAAY,MAAMJ,4BAAc,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACrH,YAAY,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACpF,YAAYC,2BAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAYF,2BAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,OAAO,GAAG,MAAMC,4BAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACpF,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQD,4BAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA,IAAI,MAAM,WAAW,GAAG;AACxB,QAAQD,4BAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,MAAM,aAAa,EAAE;AAC7B,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE;AACvC,QAAQ,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;AAChC,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;AAC/C,QAAQ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,wBAAwB,GAAG;AACrC,QAAQ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;;;;"}

package/dist/guest-auth-provider-C4BuTNIa.mjs

@@ -0,0 +1,191 @@
+import { getActiveSessionManager, genAuthNonce, genSolanaMessage, createSessionWithSignature } from '@bounded-sh/core';
+import { g as getPlatform, f as bs58, c as setAuthLoading, s as setCurrentUser } from './index.native-CytJPNQV.mjs';
+import 'react';
+
+// guest-keystore.ts — durable per-device keypair for anonymous ("guest") auth.
+//
+// A guest is an ed25519 keypair generated on the device. Its public key is the
+// Bounded account address; it signs the auth challenge exactly like a wallet.
+//
+// Guest auth has one backend: WebCrypto Ed25519 + IndexedDB. The key is
+// NON-EXTRACTABLE: an XSS can ask it to sign but can never read the private
+// bytes. If WebCrypto or IndexedDB is unavailable, guest auth fails closed
+// instead of silently creating an extractable/stored-secret credential.
+//
+// The public output is a base58 address + a base64
+// detached signature, which is the format the session endpoint already accepts.
+const LEGACY_STORED_SECRET_KEY = 'bounded_guest_key_v1';
+const IDB_NAME = 'bounded-guest';
+const IDB_STORE = 'keys';
+const IDB_KEY = 'ed25519';
+const GUEST_KEY_REQUIREMENT = 'Guest auth requires non-extractable WebCrypto Ed25519 keys persisted in IndexedDB; ' +
+    'stored-secret guest credentials are disabled.';
+function toBase64(bytes) {
+    let bin = '';
+    for (let i = 0; i < bytes.length; i++)
+        bin += String.fromCharCode(bytes[i]);
+    // btoa exists in browsers + RN (Hermes) ; Buffer is the Node/SSR fallback.
+    return typeof btoa !== 'undefined' ? btoa(bin) : Buffer.from(bytes).toString('base64');
+}
+// ----- WebCrypto (non-extractable) backend -----------------------------------
+function subtle() {
+    const c = globalThis === null || globalThis === void 0 ? void 0 : globalThis.crypto;
+    return c && c.subtle ? c.subtle : null;
+}
+function idb() {
+    return new Promise((resolve, reject) => {
+        const req = globalThis.indexedDB.open(IDB_NAME, 1);
+        req.onupgradeneeded = () => req.result.createObjectStore(IDB_STORE);
+        req.onsuccess = () => resolve(req.result);
+        req.onerror = () => reject(req.error);
+    });
+}
+function idbGet(db, key) {
+    return new Promise((resolve, reject) => {
+        const r = db.transaction(IDB_STORE, 'readonly').objectStore(IDB_STORE).get(key);
+        r.onsuccess = () => resolve(r.result);
+        r.onerror = () => reject(r.error);
+    });
+}
+function idbPut(db, key, val) {
+    return new Promise((resolve, reject) => {
+        const r = db.transaction(IDB_STORE, 'readwrite').objectStore(IDB_STORE).put(val, key);
+        r.onsuccess = () => resolve();
+        r.onerror = () => reject(r.error);
+    });
+}
+function guestKeyUnavailable(cause) {
+    const detail = cause instanceof Error && cause.message ? ` Cause: ${cause.message}` : '';
+    return new Error(`${GUEST_KEY_REQUIREMENT}${detail}`);
+}
+async function webCryptoKey() {
+    const s = subtle();
+    if (!s)
+        throw guestKeyUnavailable(new Error('WebCrypto subtle crypto is unavailable.'));
+    if (typeof globalThis.indexedDB === 'undefined') {
+        throw guestKeyUnavailable(new Error('IndexedDB is unavailable.'));
+    }
+    try {
+        const db = await idb();
+        let pair = (await idbGet(db, IDB_KEY));
+        if (!pair) {
+            // Probe Ed25519 support by generating (throws on unsupported engines).
+            pair = (await s.generateKey({ name: 'Ed25519' }, /* extractable */ false, [
+                'sign',
+                'verify',
+            ]));
+            await idbPut(db, IDB_KEY, pair); // CryptoKey is structured-cloneable; bytes never exposed
+        }
+        const raw = new Uint8Array(await s.exportKey('raw', pair.publicKey)); // public is exportable
+        const address = bs58.encode(raw);
+        return {
+            address,
+            nonExtractable: true,
+            async sign(message) {
+                const data = new TextEncoder().encode(message);
+                const sig = new Uint8Array(await s.sign({ name: 'Ed25519' }, pair.privateKey, data));
+                return toBase64(sig);
+            },
+        };
+    }
+    catch (error) {
+        throw guestKeyUnavailable(error);
+    }
+}
+let cached = null;
+/** Get (or create) this device's durable guest key. */
+async function getGuestKey() {
+    if (cached)
+        return cached;
+    cached = await webCryptoKey();
+    return cached;
+}
+/** Forget the guest key on this device (a fresh signInAnonymously mints a new one). */
+async function clearGuestKey() {
+    cached = null;
+    try {
+        getPlatform().storage.removeItem(LEGACY_STORED_SECRET_KEY);
+    }
+    catch (_a) { }
+    try {
+        if (typeof globalThis.indexedDB !== 'undefined') {
+            const db = await idb();
+            await new Promise((res) => {
+                const r = db.transaction(IDB_STORE, 'readwrite').objectStore(IDB_STORE).delete(IDB_KEY);
+                r.onsuccess = () => res();
+                r.onerror = () => res();
+            });
+        }
+    }
+    catch (_b) { }
+}
+
+const GUEST_TX_UNSUPPORTED = 'Guest (anonymous) auth is offchain-only — it cannot sign or submit Solana transactions. ' +
+    'Use a wallet provider for onchain actions.';
+class GuestAuthProvider {
+    async login() {
+        setAuthLoading(true);
+        try {
+            const key = await getGuestKey();
+            // Reuse a still-valid session for this exact guest.
+            const existing = await getActiveSessionManager().getSession();
+            if (existing && existing.address === key.address) {
+                const user = { address: key.address, isAnonymous: true, provider: this };
+                setCurrentUser(user);
+                return user;
+            }
+            // Mint a fresh session: nonce -> canonical message -> local signature.
+            const nonce = await genAuthNonce();
+            const message = await genSolanaMessage(key.address, nonce);
+            const signature = await key.sign(message); // base64 detached ed25519
+            const result = await createSessionWithSignature(key.address, message, signature);
+            await getActiveSessionManager().storeSession(key.address, result.accessToken, result.idToken, result.refreshToken);
+            const user = { address: key.address, isAnonymous: true, provider: this };
+            setCurrentUser(user);
+            return user;
+        }
+        finally {
+            setAuthLoading(false);
+        }
+    }
+    async restoreSession() {
+        const session = await getActiveSessionManager().getSession();
+        if (!session)
+            return null;
+        const user = { address: session.address, isAnonymous: true, provider: this };
+        setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        // Clears the SESSION but keeps the device key, so logging back in returns the
+        // SAME guest identity (and its data). Use forgetGuest() to wipe the key too.
+        getActiveSessionManager().clearSession();
+        setCurrentUser(null);
+    }
+    /** Wipe the device key — the next login() is a brand-new guest identity. */
+    async forgetGuest() {
+        getActiveSessionManager().clearSession();
+        await clearGuestKey();
+        setCurrentUser(null);
+    }
+    async signMessage(message) {
+        const key = await getGuestKey();
+        return key.sign(message);
+    }
+    // --- offchain guest: no Solana transaction surface -------------------------
+    async runTransaction(_evm, _sol, _options) {
+        throw new Error(GUEST_TX_UNSUPPORTED);
+    }
+    async signTransaction(_t) {
+        throw new Error(GUEST_TX_UNSUPPORTED);
+    }
+    async signAndSubmitTransaction() {
+        throw new Error(GUEST_TX_UNSUPPORTED);
+    }
+    async getNativeMethods() {
+        return {};
+    }
+}
+
+export { GuestAuthProvider };
+//# sourceMappingURL=guest-auth-provider-C4BuTNIa.mjs.map

package/dist/guest-auth-provider-C4BuTNIa.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-auth-provider-C4BuTNIa.mjs","sources":["../.rollup-tmp/auth/providers/guest-keystore.js","../.rollup-tmp/auth/providers/guest-auth-provider.js"],"sourcesContent":["// guest-keystore.ts — durable per-device keypair for anonymous (\"guest\") auth.\n//\n// A guest is an ed25519 keypair generated on the device. Its public key is the\n// Bounded account address; it signs the auth challenge exactly like a wallet.\n//\n// Guest auth has one backend: WebCrypto Ed25519 + IndexedDB. The key is\n// NON-EXTRACTABLE: an XSS can ask it to sign but can never read the private\n// bytes. If WebCrypto or IndexedDB is unavailable, guest auth fails closed\n// instead of silently creating an extractable/stored-secret credential.\n//\n// The public output is a base58 address + a base64\n// detached signature, which is the format the session endpoint already accepts.\nimport bs58 from 'bs58';\nimport { getPlatform } from '../../platform';\nconst LEGACY_STORED_SECRET_KEY = 'bounded_guest_key_v1';\nconst IDB_NAME = 'bounded-guest';\nconst IDB_STORE = 'keys';\nconst IDB_KEY = 'ed25519';\nconst GUEST_KEY_REQUIREMENT = 'Guest auth requires non-extractable WebCrypto Ed25519 keys persisted in IndexedDB; ' +\n    'stored-secret guest credentials are disabled.';\nfunction toBase64(bytes) {\n    let bin = '';\n    for (let i = 0; i < bytes.length; i++)\n        bin += String.fromCharCode(bytes[i]);\n    // btoa exists in browsers + RN (Hermes) ; Buffer is the Node/SSR fallback.\n    return typeof btoa !== 'undefined' ? btoa(bin) : Buffer.from(bytes).toString('base64');\n}\n// ----- WebCrypto (non-extractable) backend -----------------------------------\nfunction subtle() {\n    const c = globalThis === null || globalThis === void 0 ? void 0 : globalThis.crypto;\n    return c && c.subtle ? c.subtle : null;\n}\nfunction idb() {\n    return new Promise((resolve, reject) => {\n        const req = globalThis.indexedDB.open(IDB_NAME, 1);\n        req.onupgradeneeded = () => req.result.createObjectStore(IDB_STORE);\n        req.onsuccess = () => resolve(req.result);\n        req.onerror = () => reject(req.error);\n    });\n}\nfunction idbGet(db, key) {\n    return new Promise((resolve, reject) => {\n        const r = db.transaction(IDB_STORE, 'readonly').objectStore(IDB_STORE).get(key);\n        r.onsuccess = () => resolve(r.result);\n        r.onerror = () => reject(r.error);\n    });\n}\nfunction idbPut(db, key, val) {\n    return new Promise((resolve, reject) => {\n        const r = db.transaction(IDB_STORE, 'readwrite').objectStore(IDB_STORE).put(val, key);\n        r.onsuccess = () => resolve();\n        r.onerror = () => reject(r.error);\n    });\n}\nfunction guestKeyUnavailable(cause) {\n    const detail = cause instanceof Error && cause.message ? ` Cause: ${cause.message}` : '';\n    return new Error(`${GUEST_KEY_REQUIREMENT}${detail}`);\n}\nasync function webCryptoKey() {\n    const s = subtle();\n    if (!s)\n        throw guestKeyUnavailable(new Error('WebCrypto subtle crypto is unavailable.'));\n    if (typeof globalThis.indexedDB === 'undefined') {\n        throw guestKeyUnavailable(new Error('IndexedDB is unavailable.'));\n    }\n    try {\n        const db = await idb();\n        let pair = (await idbGet(db, IDB_KEY));\n        if (!pair) {\n            // Probe Ed25519 support by generating (throws on unsupported engines).\n            pair = (await s.generateKey({ name: 'Ed25519' }, /* extractable */ false, [\n                'sign',\n                'verify',\n            ]));\n            await idbPut(db, IDB_KEY, pair); // CryptoKey is structured-cloneable; bytes never exposed\n        }\n        const raw = new Uint8Array(await s.exportKey('raw', pair.publicKey)); // public is exportable\n        const address = bs58.encode(raw);\n        return {\n            address,\n            nonExtractable: true,\n            async sign(message) {\n                const data = new TextEncoder().encode(message);\n                const sig = new Uint8Array(await s.sign({ name: 'Ed25519' }, pair.privateKey, data));\n                return toBase64(sig);\n            },\n        };\n    }\n    catch (error) {\n        throw guestKeyUnavailable(error);\n    }\n}\nlet cached = null;\n/** Get (or create) this device's durable guest key. */\nexport async function getGuestKey() {\n    if (cached)\n        return cached;\n    cached = await webCryptoKey();\n    return cached;\n}\n/** Forget the guest key on this device (a fresh signInAnonymously mints a new one). */\nexport async function clearGuestKey() {\n    cached = null;\n    try {\n        getPlatform().storage.removeItem(LEGACY_STORED_SECRET_KEY);\n    }\n    catch (_a) { }\n    try {\n        if (typeof globalThis.indexedDB !== 'undefined') {\n            const db = await idb();\n            await new Promise((res) => {\n                const r = db.transaction(IDB_STORE, 'readwrite').objectStore(IDB_STORE).delete(IDB_KEY);\n                r.onsuccess = () => res();\n                r.onerror = () => res();\n            });\n        }\n    }\n    catch (_b) { }\n}\n","import { getActiveSessionManager as SessionManager, createSessionWithSignature, genAuthNonce, genSolanaMessage, } from '@bounded-sh/core';\nimport { setCurrentUser, setAuthLoading } from '../../global';\nimport { getGuestKey, clearGuestKey } from './guest-keystore';\nconst GUEST_TX_UNSUPPORTED = 'Guest (anonymous) auth is offchain-only — it cannot sign or submit Solana transactions. ' +\n    'Use a wallet provider for onchain actions.';\nexport class GuestAuthProvider {\n    async login() {\n        setAuthLoading(true);\n        try {\n            const key = await getGuestKey();\n            // Reuse a still-valid session for this exact guest.\n            const existing = await SessionManager().getSession();\n            if (existing && existing.address === key.address) {\n                const user = { address: key.address, isAnonymous: true, provider: this };\n                setCurrentUser(user);\n                return user;\n            }\n            // Mint a fresh session: nonce -> canonical message -> local signature.\n            const nonce = await genAuthNonce();\n            const message = await genSolanaMessage(key.address, nonce);\n            const signature = await key.sign(message); // base64 detached ed25519\n            const result = await createSessionWithSignature(key.address, message, signature);\n            await SessionManager().storeSession(key.address, result.accessToken, result.idToken, result.refreshToken);\n            const user = { address: key.address, isAnonymous: true, provider: this };\n            setCurrentUser(user);\n            return user;\n        }\n        finally {\n            setAuthLoading(false);\n        }\n    }\n    async restoreSession() {\n        const session = await SessionManager().getSession();\n        if (!session)\n            return null;\n        const user = { address: session.address, isAnonymous: true, provider: this };\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        // Clears the SESSION but keeps the device key, so logging back in returns the\n        // SAME guest identity (and its data). Use forgetGuest() to wipe the key too.\n        SessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    /** Wipe the device key — the next login() is a brand-new guest identity. */\n    async forgetGuest() {\n        SessionManager().clearSession();\n        await clearGuestKey();\n        setCurrentUser(null);\n    }\n    async signMessage(message) {\n        const key = await getGuestKey();\n        return key.sign(message);\n    }\n    // --- offchain guest: no Solana transaction surface -------------------------\n    async runTransaction(_evm, _sol, _options) {\n        throw new Error(GUEST_TX_UNSUPPORTED);\n    }\n    async signTransaction(_t) {\n        throw new Error(GUEST_TX_UNSUPPORTED);\n    }\n    async signAndSubmitTransaction() {\n        throw new Error(GUEST_TX_UNSUPPORTED);\n    }\n    async getNativeMethods() {\n        return {};\n    }\n}\n"],"names":["SessionManager"],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAGA,MAAM,wBAAwB,GAAG,sBAAsB;AACvD,MAAM,QAAQ,GAAG,eAAe;AAChC,MAAM,SAAS,GAAG,MAAM;AACxB,MAAM,OAAO,GAAG,SAAS;AACzB,MAAM,qBAAqB,GAAG,qFAAqF;AACnH,IAAI,+CAA+C;AACnD,SAAS,QAAQ,CAAC,KAAK,EAAE;AACzB,IAAI,IAAI,GAAG,GAAG,EAAE;AAChB,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;AACzC,QAAQ,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5C;AACA,IAAI,OAAO,OAAO,IAAI,KAAK,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAC1F;AACA;AACA,SAAS,MAAM,GAAG;AAClB,IAAI,MAAM,CAAC,GAAG,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC,MAAM;AACvF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI;AAC1C;AACA,SAAS,GAAG,GAAG;AACf,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAC5C,QAAQ,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1D,QAAQ,GAAG,CAAC,eAAe,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC;AAC3E,QAAQ,GAAG,CAAC,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;AACjD,QAAQ,GAAG,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;AAC7C,IAAI,CAAC,CAAC;AACN;AACA,SAAS,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE;AACzB,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAC5C,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;AACvF,QAAQ,CAAC,CAAC,SAAS,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7C,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AACzC,IAAI,CAAC,CAAC;AACN;AACA,SAAS,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;AAC9B,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AAC5C,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC;AAC7F,QAAQ,CAAC,CAAC,SAAS,GAAG,MAAM,OAAO,EAAE;AACrC,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AACzC,IAAI,CAAC,CAAC;AACN;AACA,SAAS,mBAAmB,CAAC,KAAK,EAAE;AACpC,IAAI,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE;AAC5F,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACzD;AACA,eAAe,YAAY,GAAG;AAC9B,IAAI,MAAM,CAAC,GAAG,MAAM,EAAE;AACtB,IAAI,IAAI,CAAC,CAAC;AACV,QAAQ,MAAM,mBAAmB,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AACvF,IAAI,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,WAAW,EAAE;AACrD,QAAQ,MAAM,mBAAmB,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;AACzE,IAAI;AACJ,IAAI,IAAI;AACR,QAAQ,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE;AAC9B,QAAQ,IAAI,IAAI,IAAI,MAAM,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AAC9C,QAAQ,IAAI,CAAC,IAAI,EAAE;AACnB;AACA,YAAY,IAAI,IAAI,MAAM,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,oBAAoB,KAAK,EAAE;AACtF,gBAAgB,MAAM;AACtB,gBAAgB,QAAQ;AACxB,aAAa,CAAC,CAAC;AACf,YAAY,MAAM,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5C,QAAQ;AACR,QAAQ,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAC7E,QAAQ,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;AACxC,QAAQ,OAAO;AACf,YAAY,OAAO;AACnB,YAAY,cAAc,EAAE,IAAI;AAChC,YAAY,MAAM,IAAI,CAAC,OAAO,EAAE;AAChC,gBAAgB,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;AAC9D,gBAAgB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AACpG,gBAAgB,OAAO,QAAQ,CAAC,GAAG,CAAC;AACpC,YAAY,CAAC;AACb,SAAS;AACT,IAAI;AACJ,IAAI,OAAO,KAAK,EAAE;AAClB,QAAQ,MAAM,mBAAmB,CAAC,KAAK,CAAC;AACxC,IAAI;AACJ;AACA,IAAI,MAAM,GAAG,IAAI;AACjB;AACO,eAAe,WAAW,GAAG;AACpC,IAAI,IAAI,MAAM;AACd,QAAQ,OAAO,MAAM;AACrB,IAAI,MAAM,GAAG,MAAM,YAAY,EAAE;AACjC,IAAI,OAAO,MAAM;AACjB;AACA;AACO,eAAe,aAAa,GAAG;AACtC,IAAI,MAAM,GAAG,IAAI;AACjB,IAAI,IAAI;AACR,QAAQ,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC;AAClE,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE,EAAE;AACjB,IAAI,IAAI;AACR,QAAQ,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,WAAW,EAAE;AACzD,YAAY,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE;AAClC,YAAY,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK;AACvC,gBAAgB,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACvG,gBAAgB,CAAC,CAAC,SAAS,GAAG,MAAM,GAAG,EAAE;AACzC,gBAAgB,CAAC,CAAC,OAAO,GAAG,MAAM,GAAG,EAAE;AACvC,YAAY,CAAC,CAAC;AACd,QAAQ;AACR,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE,EAAE;AACjB;;ACnHA,MAAM,oBAAoB,GAAG,0FAA0F;AACvH,IAAI,4CAA4C;AACzC,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,IAAI;AACZ,YAAY,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE;AAC3C;AACA,YAAY,MAAM,QAAQ,GAAG,MAAMA,uBAAc,EAAE,CAAC,UAAU,EAAE;AAChE,YAAY,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE;AAC9D,gBAAgB,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACxF,gBAAgB,cAAc,CAAC,IAAI,CAAC;AACpC,gBAAgB,OAAO,IAAI;AAC3B,YAAY;AACZ;AACA,YAAY,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE;AAC9C,YAAY,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;AACtE,YAAY,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACtD,YAAY,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;AAC5F,YAAY,MAAMA,uBAAc,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACrH,YAAY,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACpF,YAAY,cAAc,CAAC,IAAI,CAAC;AAChC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,gBAAgB;AAChB,YAAY,cAAc,CAAC,KAAK,CAAC;AACjC,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,OAAO,GAAG,MAAMA,uBAAc,EAAE,CAAC,UAAU,EAAE;AAC3D,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACpF,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB;AACA;AACA,QAAQA,uBAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA,IAAI,MAAM,WAAW,GAAG;AACxB,QAAQA,uBAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,MAAM,aAAa,EAAE;AAC7B,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE;AACvC,QAAQ,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;AAChC,IAAI;AACJ;AACA,IAAI,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;AAC/C,QAAQ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,wBAAwB,GAAG;AACrC,QAAQ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG;AAC7B,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;;;;"}

package/dist/guest-auth-provider-D54uHbov.js

@@ -0,0 +1,193 @@
+'use strict';
+
+var core = require('@bounded-sh/core');
+var index = require('./index-JBeYYsGm.js');
+require('react');
+
+// guest-keystore.ts — durable per-device keypair for anonymous ("guest") auth.
+//
+// A guest is an ed25519 keypair generated on the device. Its public key is the
+// Bounded account address; it signs the auth challenge exactly like a wallet.
+//
+// Guest auth has one backend: WebCrypto Ed25519 + IndexedDB. The key is
+// NON-EXTRACTABLE: an XSS can ask it to sign but can never read the private
+// bytes. If WebCrypto or IndexedDB is unavailable, guest auth fails closed
+// instead of silently creating an extractable/stored-secret credential.
+//
+// The public output is a base58 address + a base64
+// detached signature, which is the format the session endpoint already accepts.
+const LEGACY_STORED_SECRET_KEY = 'bounded_guest_key_v1';
+const IDB_NAME = 'bounded-guest';
+const IDB_STORE = 'keys';
+const IDB_KEY = 'ed25519';
+const GUEST_KEY_REQUIREMENT = 'Guest auth requires non-extractable WebCrypto Ed25519 keys persisted in IndexedDB; ' +
+    'stored-secret guest credentials are disabled.';
+function toBase64(bytes) {
+    let bin = '';
+    for (let i = 0; i < bytes.length; i++)
+        bin += String.fromCharCode(bytes[i]);
+    // btoa exists in browsers + RN (Hermes) ; Buffer is the Node/SSR fallback.
+    return typeof btoa !== 'undefined' ? btoa(bin) : Buffer.from(bytes).toString('base64');
+}
+// ----- WebCrypto (non-extractable) backend -----------------------------------
+function subtle() {
+    const c = globalThis === null || globalThis === void 0 ? void 0 : globalThis.crypto;
+    return c && c.subtle ? c.subtle : null;
+}
+function idb() {
+    return new Promise((resolve, reject) => {
+        const req = globalThis.indexedDB.open(IDB_NAME, 1);
+        req.onupgradeneeded = () => req.result.createObjectStore(IDB_STORE);
+        req.onsuccess = () => resolve(req.result);
+        req.onerror = () => reject(req.error);
+    });
+}
+function idbGet(db, key) {
+    return new Promise((resolve, reject) => {
+        const r = db.transaction(IDB_STORE, 'readonly').objectStore(IDB_STORE).get(key);
+        r.onsuccess = () => resolve(r.result);
+        r.onerror = () => reject(r.error);
+    });
+}
+function idbPut(db, key, val) {
+    return new Promise((resolve, reject) => {
+        const r = db.transaction(IDB_STORE, 'readwrite').objectStore(IDB_STORE).put(val, key);
+        r.onsuccess = () => resolve();
+        r.onerror = () => reject(r.error);
+    });
+}
+function guestKeyUnavailable(cause) {
+    const detail = cause instanceof Error && cause.message ? ` Cause: ${cause.message}` : '';
+    return new Error(`${GUEST_KEY_REQUIREMENT}${detail}`);
+}
+async function webCryptoKey() {
+    const s = subtle();
+    if (!s)
+        throw guestKeyUnavailable(new Error('WebCrypto subtle crypto is unavailable.'));
+    if (typeof globalThis.indexedDB === 'undefined') {
+        throw guestKeyUnavailable(new Error('IndexedDB is unavailable.'));
+    }
+    try {
+        const db = await idb();
+        let pair = (await idbGet(db, IDB_KEY));
+        if (!pair) {
+            // Probe Ed25519 support by generating (throws on unsupported engines).
+            pair = (await s.generateKey({ name: 'Ed25519' }, /* extractable */ false, [
+                'sign',
+                'verify',
+            ]));
+            await idbPut(db, IDB_KEY, pair); // CryptoKey is structured-cloneable; bytes never exposed
+        }
+        const raw = new Uint8Array(await s.exportKey('raw', pair.publicKey)); // public is exportable
+        const address = index.bs58.encode(raw);
+        return {
+            address,
+            nonExtractable: true,
+            async sign(message) {
+                const data = new TextEncoder().encode(message);
+                const sig = new Uint8Array(await s.sign({ name: 'Ed25519' }, pair.privateKey, data));
+                return toBase64(sig);
+            },
+        };
+    }
+    catch (error) {
+        throw guestKeyUnavailable(error);
+    }
+}
+let cached = null;
+/** Get (or create) this device's durable guest key. */
+async function getGuestKey() {
+    if (cached)
+        return cached;
+    cached = await webCryptoKey();
+    return cached;
+}
+/** Forget the guest key on this device (a fresh signInAnonymously mints a new one). */
+async function clearGuestKey() {
+    cached = null;
+    try {
+        index.getPlatform().storage.removeItem(LEGACY_STORED_SECRET_KEY);
+    }
+    catch (_a) { }
+    try {
+        if (typeof globalThis.indexedDB !== 'undefined') {
+            const db = await idb();
+            await new Promise((res) => {
+                const r = db.transaction(IDB_STORE, 'readwrite').objectStore(IDB_STORE).delete(IDB_KEY);
+                r.onsuccess = () => res();
+                r.onerror = () => res();
+            });
+        }
+    }
+    catch (_b) { }
+}
+
+const GUEST_TX_UNSUPPORTED = 'Guest (anonymous) auth is offchain-only — it cannot sign or submit Solana transactions. ' +
+    'Use a wallet provider for onchain actions.';
+class GuestAuthProvider {
+    async login() {
+        index.setAuthLoading(true);
+        try {
+            const key = await getGuestKey();
+            // Reuse a still-valid session for this exact guest.
+            const existing = await core.getActiveSessionManager().getSession();
+            if (existing && existing.address === key.address) {
+                const user = { address: key.address, isAnonymous: true, provider: this };
+                index.setCurrentUser(user);
+                return user;
+            }
+            // Mint a fresh session: nonce -> canonical message -> local signature.
+            const nonce = await core.genAuthNonce();
+            const message = await core.genSolanaMessage(key.address, nonce);
+            const signature = await key.sign(message); // base64 detached ed25519
+            const result = await core.createSessionWithSignature(key.address, message, signature);
+            await core.getActiveSessionManager().storeSession(key.address, result.accessToken, result.idToken, result.refreshToken);
+            const user = { address: key.address, isAnonymous: true, provider: this };
+            index.setCurrentUser(user);
+            return user;
+        }
+        finally {
+            index.setAuthLoading(false);
+        }
+    }
+    async restoreSession() {
+        const session = await core.getActiveSessionManager().getSession();
+        if (!session)
+            return null;
+        const user = { address: session.address, isAnonymous: true, provider: this };
+        index.setCurrentUser(user);
+        return user;
+    }
+    async logout() {
+        // Clears the SESSION but keeps the device key, so logging back in returns the
+        // SAME guest identity (and its data). Use forgetGuest() to wipe the key too.
+        core.getActiveSessionManager().clearSession();
+        index.setCurrentUser(null);
+    }
+    /** Wipe the device key — the next login() is a brand-new guest identity. */
+    async forgetGuest() {
+        core.getActiveSessionManager().clearSession();
+        await clearGuestKey();
+        index.setCurrentUser(null);
+    }
+    async signMessage(message) {
+        const key = await getGuestKey();
+        return key.sign(message);
+    }
+    // --- offchain guest: no Solana transaction surface -------------------------
+    async runTransaction(_evm, _sol, _options) {
+        throw new Error(GUEST_TX_UNSUPPORTED);
+    }
+    async signTransaction(_t) {
+        throw new Error(GUEST_TX_UNSUPPORTED);
+    }
+    async signAndSubmitTransaction() {
+        throw new Error(GUEST_TX_UNSUPPORTED);
+    }
+    async getNativeMethods() {
+        return {};
+    }
+}
+
+exports.GuestAuthProvider = GuestAuthProvider;
+//# sourceMappingURL=guest-auth-provider-D54uHbov.js.map