@bounded-sh/client 0.0.48 → 0.0.51

package/README.md

@@ -132,6 +132,27 @@ async function pay(tx: VersionedTransaction) {
 `signMessage` and `signTransaction` (sign without submit) throw for embedded smart
 wallets — they sign and submit atomically, so use `signAndSubmitTransaction`.
 
+### Platform app and build control
+
+The headless `apps` and `builds` namespaces provision apps and control unified
+build runs from Bounded's own product surfaces. They are for platform first-party
+surfaces only (`bounded.sh`, `oapps.fun`, and localhost): developer-api CORS blocks
+browser calls from generated-app origins. Server-side callers are unaffected by
+that CORS boundary.
+
+```typescript
+import { apps, builds } from '@bounded-sh/client';
+
+const app = await apps.create({ prompt, clientToken });
+if (!app.policySeeded) throw new Error('Starter policy is not ready');
+
+const submitted = await builds.submit(app.appId, { prompt, intentKey });
+const watcher = builds.watch(app.appId, submitted.runId, ({ run, events }) => {
+  console.log(run.state, events);
+});
+// watcher.stop();
+```
+
 ## Usage
 
 ### Get Current User

package/dist/auth/index.d.ts

@@ -52,6 +52,13 @@ export declare function signInAnonymously(): Promise<User | null>;
 export declare function loginWithPrivy(options?: LoginOptions): Promise<User | null>;
 export declare function login(options?: LoginOptions): Promise<User | null>;
 export declare function getCurrentAuthMethod(): string | null;
-export declare function logout(): Promise<void>;
+export interface LogoutOptions {
+    /** Keep the hosted issuer's browser session alive (skip the top-level bounce
+     *  through the issuer's /logout). Default false: an explicit logout ends the
+     *  issuer session too, so the next sign-in is a fresh account choice instead
+     *  of a silent re-login as the same user. */
+    keepIssuerSession?: boolean;
+}
+export declare function logout(options?: LogoutOptions): Promise<void>;
 export { loginWithRedirect, completeLoginFromRedirect, loginWithPopup, completeLoginInPopup } from './oidc-auth';
 export type { HostedAuthMethod, OidcLoginOptions, PopupLoginOptions } from './oidc-auth';

package/dist/auth/providers/guest-auth-provider.d.ts

@@ -1,8 +1,15 @@
 import type { AuthProvider, User, TransactionResult, SolTransaction, EVMTransaction, SetOptions } from '@bounded-sh/core';
 import type { Transaction, VersionedTransaction } from '@solana/web3.js';
 export declare class GuestAuthProvider implements AuthProvider {
+    private loginInternal;
     login(): Promise<User | null>;
+    /** @internal Stage a guest session without exposing mixed provider/user state. */
+    loginForProviderSwitch(): Promise<User | null>;
+    private tokenIsGuest;
+    private restoreSessionInternal;
     restoreSession(): Promise<User | null>;
+    /** @internal Reconcile an applied-yet-error guest mint before committing a switch. */
+    restoreSessionForProviderSwitch(): Promise<User | null>;
     logout(): Promise<void>;
     /** Wipe the device key — the next login() is a brand-new guest identity. */
     forgetGuest(): Promise<void>;

package/dist/auth/providers/guest-keystore.d.ts

@@ -8,5 +8,7 @@ export interface GuestKey {
 }
 /** Get (or create) this device's durable guest key. */
 export declare function getGuestKey(): Promise<GuestKey>;
+/** Read the existing durable guest key without ever minting a replacement. */
+export declare function getExistingGuestKey(): Promise<GuestKey | null>;
 /** Forget the guest key on this device (a fresh signInAnonymously mints a new one). */
 export declare function clearGuestKey(): Promise<void>;

package/dist/builds/apps.d.ts

@@ -0,0 +1,32 @@
+export interface CreateAppOptions {
+    /** Optional display name accepted by the developer API. */
+    name?: string;
+    prompt?: string;
+    clientToken?: string;
+    /** Provisioning intent marker; "create-flow" enables never-built-app reuse and starter credit server-side. */
+    intent?: string;
+}
+export interface CreatedApp {
+    appId: string;
+    slug?: string;
+    url: string;
+    /** Callers must gate the first build on this being true. */
+    policySeeded: boolean;
+}
+export interface AppListItem {
+    appId: string;
+    name: string;
+    slug?: string;
+    /** Canonical app URL, when supplied by the developer API. */
+    url?: string;
+}
+export declare function create(options?: CreateAppOptions): Promise<CreatedApp>;
+export declare function list(): Promise<AppListItem[]>;
+/**
+ * Platform first-party surfaces only (bounded.sh, oapps.fun, localhost) —
+ * dev-api CORS blocks calls from generated-app origins. Server-side callers unaffected.
+ */
+export declare const apps: {
+    create: typeof create;
+    list: typeof list;
+};

package/dist/builds/client.d.ts

@@ -0,0 +1,74 @@
+import type { BuildCancelResponse, BuildEventsResponse, BuildGateDecisionResponse, BuildGetResponse, BuildListResponse, BuildsApiErrorDetails, BuildSubmitResponse, BuildTopupResponse } from './types';
+type BuildIdempotencyOptions = {
+    /** Caller-minted wire key (1-256 characters), passed through unchanged. */
+    idempotencyKey: string;
+    /** When also supplied, persists the caller-minted key for this logical action. */
+    intentKey?: string;
+} | {
+    /** Omit to let the SDK mint and persist a wire key before the request. */
+    idempotencyKey?: undefined;
+    /** Stable logical-action key used to reuse the minted key across page refreshes. */
+    intentKey: string;
+};
+/**
+ * Build submission plus one idempotency strategy: provide `idempotencyKey`, or
+ * provide a stable client-only `intentKey` and let the SDK mint/persist the wire key.
+ */
+export type BuildSubmitOptions = {
+    prompt: string;
+    operation?: 'edit';
+    constraints?: object;
+    effort?: string;
+    profile?: string;
+    baseDeploymentId?: string;
+} & BuildIdempotencyOptions;
+/**
+ * Gate decision plus one idempotency strategy. A client-only `intentKey` can
+ * replace a caller-minted `idempotencyKey` and survives refresh replays.
+ */
+export type BuildGateDecisionOptions = {
+    decision: 'approve' | 'reject';
+    note?: string;
+} & BuildIdempotencyOptions;
+export interface BuildTopupOptions {
+    dimension: string;
+    amountMicroUsd: number;
+    idempotencyKey: string;
+}
+interface DevApiRequest {
+    method?: string;
+    body?: unknown;
+}
+interface BuildsApiErrorInit<TDetails = BuildsApiErrorDetails> {
+    code: string;
+    message: string;
+    retryable: boolean;
+    status: number;
+    details?: TDetails;
+    retryAfterMs?: number;
+}
+/** A structured non-2xx response from the developer API. */
+export declare class BuildsApiError<TDetails = BuildsApiErrorDetails> extends Error {
+    readonly code: string;
+    readonly retryable: boolean;
+    readonly status: number;
+    /**
+     * Developer-api error details, preserved verbatim. For
+     * `project_limit_exceeded`, `usage`, `limit`, and `dimension` are all present
+     * (the exact shape is exported as `ProjectLimitExceededDetails`).
+     */
+    readonly details?: TDetails;
+    /** Parsed Retry-After delay, when a 429 response supplied one. */
+    readonly retryAfterMs?: number;
+    constructor(init: BuildsApiErrorInit<TDetails>);
+}
+/** @internal Shared authenticated developer-api transport for builds and apps. */
+export declare function requestDevApi<T>(path: string, request?: DevApiRequest): Promise<T>;
+export declare function submit(appId: string, options: BuildSubmitOptions): Promise<BuildSubmitResponse>;
+export declare function get(appId: string, runId: string): Promise<BuildGetResponse>;
+export declare function events(appId: string, runId: string, after?: number): Promise<BuildEventsResponse>;
+export declare function cancel(appId: string, runId: string): Promise<BuildCancelResponse>;
+export declare function decideGate(appId: string, runId: string, gateId: string, options: BuildGateDecisionOptions): Promise<BuildGateDecisionResponse>;
+export declare function topup(appId: string, runId: string, options: BuildTopupOptions): Promise<BuildTopupResponse>;
+export declare function list(appId: string, limit?: number): Promise<BuildListResponse>;
+export {};

package/dist/builds/index.d.ts

@@ -0,0 +1,20 @@
+import { cancel, decideGate, events, get, list, submit, topup } from './client';
+import { watch } from './watch';
+/**
+ * Platform first-party surfaces only (bounded.sh, oapps.fun, localhost) —
+ * dev-api CORS blocks calls from generated-app origins. Server-side callers unaffected.
+ */
+export declare const builds: {
+    submit: typeof submit;
+    get: typeof get;
+    events: typeof events;
+    cancel: typeof cancel;
+    decideGate: typeof decideGate;
+    topup: typeof topup;
+    list: typeof list;
+    watch: typeof watch;
+};
+export { BuildsApiError } from './client';
+export type { BuildGateDecisionOptions, BuildSubmitOptions, BuildTopupOptions, } from './client';
+export type { BuildRunWatchHandle, BuildRunWatchOptions, BuildRunWatchUpdate, } from './watch';
+export * from './types';

package/dist/builds/types.d.ts

@@ -0,0 +1,127 @@
+export declare const NON_TERMINAL_STATES: readonly ["queued", "admitted", "executing", "preview_ready", "parked", "resuming", "promoting", "quarantined"];
+export declare const TERMINAL_STATES: readonly ["promoted", "failed", "canceled", "rejected", "expired", "rebase_required", "reported"];
+export declare const RUN_STATES: readonly ["queued", "admitted", "executing", "preview_ready", "parked", "resuming", "promoting", "quarantined", "promoted", "failed", "canceled", "rejected", "expired", "rebase_required", "reported"];
+export declare const PARK_REASONS: readonly ["gate", "funding"];
+export declare const FAILURE_REASONS: readonly ["admission_rejected", "dispatch_timeout", "auth_revoked", "owner_changed", "policy_changed", "quarantine_forced", "bind_failed", "internal_error"];
+export type NonTerminalState = (typeof NON_TERMINAL_STATES)[number];
+export type TerminalState = (typeof TERMINAL_STATES)[number];
+export type RunState = (typeof RUN_STATES)[number];
+export type ParkReason = (typeof PARK_REASONS)[number];
+export type FailureReason = (typeof FAILURE_REASONS)[number];
+/** Additive wire:1 build projection returned by developer-api. */
+export interface BuildRunClientView {
+    runId: string;
+    /** Known values are in RUN_STATES; unknown values must flow through unchanged. */
+    state: string;
+    parkReason?: string;
+    failureReason?: string;
+    failureDetail?: string;
+    quarantineReason?: string;
+    quarantinedAtMs?: number;
+    quarantineDetail?: {
+        code: string;
+        message: string;
+    };
+    operation: string;
+    /** The developer-api app this run targets. */
+    appId: string;
+    targetAppId: string;
+    /** Full submitted prompt, when retained by the owner-only developer-api view. */
+    prompt?: string;
+    appUrl?: string;
+    previewUrl?: string;
+    gates: Array<{
+        gateId: string;
+        type: string;
+        expiresAtMs?: number;
+        decided: boolean;
+        decision?: string;
+    }>;
+    stageSummaries: Array<{
+        stage: string;
+        at: number;
+        note?: string;
+    }>;
+    usage?: {
+        aiMicroUsd: number;
+        infraMicroUsd: number;
+    };
+    createdAtMs: number;
+    updatedAtMs: number;
+}
+export interface RunEventView {
+    seq: number;
+    type: string;
+    atMs: number;
+    data?: unknown;
+}
+export interface BuildRunListRow {
+    runId: string;
+    appId: string;
+    createdAtMs: number;
+    state?: string;
+    promptExcerpt?: string;
+    updatedAtMs?: number;
+}
+/**
+ * Extensible developer-api error details. Project-limit errors populate the
+ * typed fields below; other error codes may add arbitrary fields.
+ */
+export interface BuildsApiErrorDetails {
+    /** Current usage when `code === "project_limit_exceeded"`. */
+    usage?: number;
+    /** Allowed usage when `code === "project_limit_exceeded"`. */
+    limit?: number;
+    /** Limit axis (for example, `maxProjects`) when a quota gate rejects. */
+    dimension?: string;
+    [key: string]: unknown;
+}
+/** Exact details supplied with a `project_limit_exceeded` error. */
+export interface ProjectLimitExceededDetails extends BuildsApiErrorDetails {
+    usage: number;
+    limit: number;
+    dimension: string;
+}
+export interface BuildsApiErrorEnvelope {
+    error: {
+        code: string;
+        message: string;
+        retryable: boolean;
+        details?: BuildsApiErrorDetails;
+    };
+}
+export interface BuildSubmitResponse {
+    wire: 1;
+    runId: string;
+    targetAppId: string;
+    status: string;
+}
+export interface BuildGetResponse {
+    wire: 1;
+    run: BuildRunClientView;
+}
+export interface BuildEventsResponse {
+    wire: 1;
+    events: RunEventView[];
+}
+export interface BuildCancelResponse {
+    wire: 1;
+    runId: string;
+    state: string;
+}
+export interface BuildGateDecisionResponse {
+    wire: 1;
+    runId: string;
+    gateId: string;
+    decision: 'approve' | 'reject';
+    state: string;
+}
+export interface BuildTopupResponse {
+    wire: 1;
+    runId: string;
+    state: string;
+}
+export interface BuildListResponse {
+    wire: 1;
+    runs: BuildRunListRow[];
+}

package/dist/builds/watch.d.ts

@@ -0,0 +1,20 @@
+import type { BuildRunClientView, RunEventView } from './types';
+export interface BuildRunWatchUpdate {
+    run: BuildRunClientView;
+    /** Events first observed on this poll, ordered as returned by the server. */
+    events: RunEventView[];
+}
+export interface BuildRunWatchOptions {
+    /** Initial exclusive event cursor. Defaults to zero. */
+    after?: number;
+    /** Called for transient polling errors; polling continues unless the run is terminal. */
+    onError?: (error: unknown) => void;
+}
+export interface BuildRunWatchHandle {
+    stop(): void;
+}
+/**
+ * Poll a build view and its event cursor until stopped or the run reaches a
+ * known terminal state. Unknown state strings remain untouched and nonterminal.
+ */
+export declare function watch(appId: string, runId: string, onUpdate: (update: BuildRunWatchUpdate) => void, options?: BuildRunWatchOptions): BuildRunWatchHandle;

package/dist/{email-auth-provider-GRj8IOg2.mjs → email-auth-provider-Bh2fDYcb.mjs}

@@ -1,5 +1,5 @@
 import { getActiveSessionManager } from '@bounded-sh/core';
-import { s as setCurrentUser, E as EMBEDDED_WALLET_UNSUPPORTED, h as hasEmbeddedWallet, a as hasEmbeddedEvmWallet, e as embeddedRunEvmTransaction, b as embeddedSignAndSubmit, g as getPlatform } from './index.native-CytJPNQV.mjs';
+import { s as setCurrentUser, E as EMBEDDED_WALLET_UNSUPPORTED, h as hasEmbeddedWallet, a as hasEmbeddedEvmWallet, e as embeddedRunEvmTransaction, b as embeddedSignAndSubmit, g as getPlatform } from './index.native-B29WKXlr.mjs';
 import 'react';
 
 // Web uses localStorage (WebSessionManager); React Native uses the configured
@@ -96,4 +96,4 @@ class EmailAuthProvider {
 const emailProviderSingleton = new EmailAuthProvider();
 
 export { EmailAuthProvider, emailProviderSingleton };
-//# sourceMappingURL=email-auth-provider-GRj8IOg2.mjs.map
+//# sourceMappingURL=email-auth-provider-Bh2fDYcb.mjs.map

package/dist/{email-auth-provider-GRj8IOg2.mjs.map → email-auth-provider-Bh2fDYcb.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"email-auth-provider-GRj8IOg2.mjs","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":[],"mappings":";;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAAC,oBAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAO,yBAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAAC,iBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,qBAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;"}
+{"version":3,"file":"email-auth-provider-Bh2fDYcb.mjs","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":[],"mappings":";;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAAC,oBAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAO,yBAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAAC,iBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,qBAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;"}

package/dist/{email-auth-provider-DyxZTpx6.js → email-auth-provider-Bm6vmoy3.js}

@@ -1,7 +1,7 @@
 'use strict';
 
 var core = require('@bounded-sh/core');
-var index = require('./index-JBeYYsGm.js');
+var index = require('./index-BsrZb496.js');
 require('react');
 
 // Web uses localStorage (WebSessionManager); React Native uses the configured
@@ -99,4 +99,4 @@ const emailProviderSingleton = new EmailAuthProvider();
 
 exports.EmailAuthProvider = EmailAuthProvider;
 exports.emailProviderSingleton = emailProviderSingleton;
-//# sourceMappingURL=email-auth-provider-DyxZTpx6.js.map
+//# sourceMappingURL=email-auth-provider-Bm6vmoy3.js.map

package/dist/{email-auth-provider-DyxZTpx6.js.map → email-auth-provider-Bm6vmoy3.js.map}

@@ -1 +1 @@
-{"version":3,"file":"email-auth-provider-DyxZTpx6.js","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":["getActiveSessionManager","getPlatform","setCurrentUser","hasEmbeddedWallet","EMBEDDED_WALLET_UNSUPPORTED","hasEmbeddedEvmWallet","embeddedRunEvmTransaction","embeddedSignAndSubmit"],"mappings":";;;;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAGA,4BAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAACC,iBAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQA,oBAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAACC,uBAAiB,EAAE,GAAGC,iCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAACC,0BAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAOC,+BAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAACH,uBAAiB,EAAE,GAAGC,iCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAACD,uBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOI,2BAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;;"}
+{"version":3,"file":"email-auth-provider-Bm6vmoy3.js","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":["getActiveSessionManager","getPlatform","setCurrentUser","hasEmbeddedWallet","EMBEDDED_WALLET_UNSUPPORTED","hasEmbeddedEvmWallet","embeddedRunEvmTransaction","embeddedSignAndSubmit"],"mappings":";;;;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAGA,4BAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAACC,iBAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQA,oBAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAACC,uBAAiB,EAAE,GAAGC,iCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAACC,0BAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAOC,+BAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAACH,uBAAiB,EAAE,GAAGC,iCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAACD,uBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOI,2BAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;;"}

package/dist/{email-auth-provider-CTyjwhLb.mjs → email-auth-provider-CdbhqElf.mjs}

@@ -1,5 +1,5 @@
 import { getActiveSessionManager } from '@bounded-sh/core';
-import { s as setCurrentUser, E as EMBEDDED_WALLET_UNSUPPORTED, h as hasEmbeddedWallet, a as hasEmbeddedEvmWallet, e as embeddedRunEvmTransaction, b as embeddedSignAndSubmit, g as getPlatform } from './index-C0pR5b7j.mjs';
+import { s as setCurrentUser, E as EMBEDDED_WALLET_UNSUPPORTED, h as hasEmbeddedWallet, a as hasEmbeddedEvmWallet, e as embeddedRunEvmTransaction, b as embeddedSignAndSubmit, g as getPlatform } from './index-Cy0IRs6U.mjs';
 import 'react';
 
 // Web uses localStorage (WebSessionManager); React Native uses the configured
@@ -96,4 +96,4 @@ class EmailAuthProvider {
 const emailProviderSingleton = new EmailAuthProvider();
 
 export { EmailAuthProvider, emailProviderSingleton };
-//# sourceMappingURL=email-auth-provider-CTyjwhLb.mjs.map
+//# sourceMappingURL=email-auth-provider-CdbhqElf.mjs.map

package/dist/{email-auth-provider-CTyjwhLb.mjs.map → email-auth-provider-CdbhqElf.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"email-auth-provider-CTyjwhLb.mjs","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":[],"mappings":";;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAAC,oBAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAO,yBAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAAC,iBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,qBAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;"}
+{"version":3,"file":"email-auth-provider-CdbhqElf.mjs","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":[],"mappings":";;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAAC,oBAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAO,yBAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,GAAG,2BAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAAC,iBAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,qBAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;"}

package/dist/{email-auth-provider-CmunfauO.js → email-auth-provider-CnHsY8U-.js}

@@ -1,7 +1,7 @@
 'use strict';
 
 var core = require('@bounded-sh/core');
-var index_native = require('./index.native-BZCc0gO-.js');
+var index_native = require('./index.native-BaEZwiWd.js');
 require('react');
 
 // Web uses localStorage (WebSessionManager); React Native uses the configured
@@ -99,4 +99,4 @@ const emailProviderSingleton = new EmailAuthProvider();
 
 exports.EmailAuthProvider = EmailAuthProvider;
 exports.emailProviderSingleton = emailProviderSingleton;
-//# sourceMappingURL=email-auth-provider-CmunfauO.js.map
+//# sourceMappingURL=email-auth-provider-CnHsY8U-.js.map

package/dist/{email-auth-provider-CmunfauO.js.map → email-auth-provider-CnHsY8U-.js.map}

@@ -1 +1 @@
-{"version":3,"file":"email-auth-provider-CmunfauO.js","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":["getActiveSessionManager","getPlatform","setCurrentUser","hasEmbeddedWallet","EMBEDDED_WALLET_UNSUPPORTED","hasEmbeddedEvmWallet","embeddedRunEvmTransaction","embeddedSignAndSubmit"],"mappings":";;;;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAGA,4BAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAACC,wBAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQA,2BAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAACC,8BAAiB,EAAE,GAAGC,wCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAACC,iCAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAOC,sCAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAACH,8BAAiB,EAAE,GAAGC,wCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAACD,8BAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOI,kCAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;;"}
+{"version":3,"file":"email-auth-provider-CnHsY8U-.js","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasEmbeddedWallet, hasEmbeddedEvmWallet, embeddedSignAndSubmit, embeddedRunEvmTransaction, EMBEDDED_WALLET_UNSUPPORTED, } from '../crossmint-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'Email login has no embedded wallet. Enable `\"auth\": { \"wallets\": true }` in ' +\n    'the app policy so email logins get a non-custodial Crossmint wallet ' +\n    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +\n    'provider (e.g. Phantom) for onchain actions.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    // Email logins have no wallet — address is null (the User type allows it).\n    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])\n        ? c['custom:evmWalletAddress'].toLowerCase()\n        : null;\n    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a\n    // raw signature — signMessage/signTransaction are structurally unsupported\n    // (throw the clear \"use signAndSubmitTransaction\" error when a wallet exists;\n    // the no-wallet error otherwise). signAndSubmitTransaction routes through the\n    // Bounded signer popup for wallets-enabled email logins.\n    async signMessage(_message) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async runTransaction(evm, sol, options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!evm)\n            throw new Error(NO_WALLET);\n        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)\n            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');\n        if (!hasEmbeddedEvmWallet())\n            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');\n        return embeddedRunEvmTransaction(evm);\n    }\n    async signTransaction(_t) {\n        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);\n    }\n    async signAndSubmitTransaction(transaction, _feePayer) {\n        if (!hasEmbeddedWallet())\n            throw new Error(NO_WALLET);\n        return embeddedSignAndSubmit(transaction);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":["getActiveSessionManager","getPlatform","setCurrentUser","hasEmbeddedWallet","EMBEDDED_WALLET_UNSUPPORTED","hasEmbeddedEvmWallet","embeddedRunEvmTransaction","embeddedSignAndSubmit"],"mappings":";;;;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAGA,4BAAuB;AAC9C,MAAM,SAAS,GAAG,8EAA8E;AAChG,IAAI,sEAAsE;AAC1E,IAAI,yEAAyE;AAC7E,IAAI,8CAA8C;AAClD;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAACC,wBAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD;AACA,IAAI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAClI,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,WAAW;AAClD,UAAU,IAAI;AACd,IAAI,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE;AACpH;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,cAAc,EAAE,CAAC,YAAY,EAAE;AACvC,QAAQA,2BAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE;AAChC,QAAQ,MAAM,IAAI,KAAK,CAACC,8BAAiB,EAAE,GAAGC,wCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;AAC5C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,GAAG;AAChB,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAChG,YAAY,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC;AACpH,QAAQ,IAAI,CAACC,iCAAoB,EAAE;AACnC,YAAY,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC;AAC7I,QAAQ,OAAOC,sCAAyB,CAAC,GAAG,CAAC;AAC7C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,EAAE,EAAE;AAC9B,QAAQ,MAAM,IAAI,KAAK,CAACH,8BAAiB,EAAE,GAAGC,wCAA2B,GAAG,SAAS,CAAC;AACtF,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE;AAC3D,QAAQ,IAAI,CAACD,8BAAiB,EAAE;AAChC,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOI,kCAAqB,CAAC,WAAW,CAAC;AACjD,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;;"}

package/dist/global.d.ts

@@ -1,13 +1,15 @@
 import { AuthProvider, User, ClientConfig } from '@bounded-sh/core';
-import { LoginOptions } from './auth';
+import { LoginOptions, LogoutOptions } from './auth';
 export declare function init(newConfig: Partial<ClientConfig>): Promise<void>;
 export declare function onAuthStateChanged(callback: (user: User | null) => void): () => void;
 export declare function onAuthLoadingChanged(callback: (loading: boolean) => void): () => void;
 export declare function setAuthLoading(loading: boolean): void;
 export declare function getAuthLoading(): boolean;
 export declare function login(options?: LoginOptions): Promise<User | null>;
-export type { LoginOptions };
-export declare function logout(): Promise<void>;
+export type { LoginOptions, LogoutOptions };
+export declare function logout(options?: LogoutOptions): Promise<void>;
 export declare function setCurrentUser(user: User | null): void;
 export declare function getCurrentUser(): User | null;
-export declare function setAuthProviderInstance(provider: AuthProvider): void;
+/** @internal Snapshot/restore surface for transactional auth-provider switches. */
+export declare function getAuthProviderInstance(): AuthProvider | null;
+export declare function setAuthProviderInstance(provider: AuthProvider | null): void;