@bounded-sh/client 0.0.50 → 0.0.52

package/dist/{index-m42Be5Oj.js → index-D4jNluH9.js}

@@ -4466,7 +4466,7 @@ async function getAuthProvider(config) {
             // manager as legacy email sessions. Human login should be started
             // with loginWithRedirect(); this provider is kept as the restore and
             // logout surface for those sessions.
-            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./email-auth-provider-Dj66AuH0.js'); })).EmailAuthProvider();
+            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./email-auth-provider-6seVxrWq.js'); })).EmailAuthProvider();
             break;
         case "wallet":
         case "phantom": {
@@ -4485,7 +4485,7 @@ async function getAuthProvider(config) {
             if (!isWalletLoginEnabled(config)) {
                 throw walletLoginNotEnabledError(authMethod);
             }
-            const { InjectedWalletProvider } = await Promise.resolve().then(function () { return require('./injected-wallet-provider-Cml9TkyV.js'); });
+            const { InjectedWalletProvider } = await Promise.resolve().then(function () { return require('./injected-wallet-provider-CyCGjf2G.js'); });
             currentAuthProvider = new InjectedWalletProvider(resolveInjectedWalletConfig(config), rpcUrl, configuredNetwork);
             break;
         }
@@ -4498,7 +4498,7 @@ async function getAuthProvider(config) {
             // Selecting authMethod:'evm-wallet' IS the opt-in — pass evmWalletConfig
             // to point at a specific wallet or set chainId/domain.
             const evmWalletConfig = ((_a = config.evmWalletConfig) !== null && _a !== void 0 ? _a : {});
-            const { InjectedEvmWalletProvider } = await Promise.resolve().then(function () { return require('./injected-evm-wallet-provider-BLQzWiBP.js'); });
+            const { InjectedEvmWalletProvider } = await Promise.resolve().then(function () { return require('./injected-evm-wallet-provider-BEGvuTUU.js'); });
             currentAuthProvider = new InjectedEvmWalletProvider(evmWalletConfig);
             break;
         }
@@ -4526,7 +4526,7 @@ async function getAuthProvider(config) {
             break;
         case "guest":
             // Anonymous auth: a device-local ed25519 keypair signs the challenge.
-            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-B5sgg-q5.js'); })).GuestAuthProvider();
+            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-BrSO-CUp.js'); })).GuestAuthProvider();
             break;
     }
     if (!currentAuthProvider) {
@@ -4582,7 +4582,7 @@ async function signInAnonymously() {
     // Lazy-load the guest provider so its ed25519/web3 dependencies stay out of
     // the main bundle for data-only apps. Specifier is a static string literal
     // so bundle-splitting can see it.
-    const provider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-B5sgg-q5.js'); })).GuestAuthProvider();
+    const provider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-BrSO-CUp.js'); })).GuestAuthProvider();
     setAuthLoading(true); // reflect "signing in…" while the guest keypair session is minted
     const commit = (user) => {
         // No await/interleaving inside this block: provider/method/config/marker
@@ -4758,8 +4758,45 @@ async function login$1(options) {
 function getCurrentAuthMethod() {
     return currentAuthMethod;
 }
-async function logout$1() {
-    var _a;
+// The hosted issuer keeps its OWN browser session (the Better Auth cookie on
+// auth.bounded.sh) — clearing the app-local session alone leaves it alive, so
+// the next loginWithRedirect() silently re-signs the user in as the SAME
+// account: "sign out" that never lets you re-choose. The issuer ships
+// GET /logout for exactly this — it expires the session cookies and bounces
+// back — but it only redirects to https origins it trusts. Mirror that
+// allowlist here: on a trusted origin we end the issuer session with a
+// top-level bounce; anywhere else (custom domains, http dev) we keep the
+// local-only logout instead of stranding the user on the issuer origin.
+function issuerLogoutBounceUrl(issuerBase) {
+    if (typeof window === 'undefined' || typeof document === 'undefined')
+        return null; // RN/Node: no shared cookie jar to clear this way
+    try {
+        if (window.top !== window.self)
+            return null; // framed: SameSite=Lax cookies don't ride iframe navigations
+    }
+    catch (_a) {
+        return null;
+    }
+    try {
+        const here = new URL(window.location.href);
+        const host = here.hostname;
+        const isLocalhost = host === 'localhost' || host === '127.0.0.1' || host.endsWith('.localhost');
+        const trusted = here.protocol === 'https:' &&
+            (host === 'bounded.sh' ||
+                host.endsWith('.bounded.sh') ||
+                host.endsWith('.bounded.page') ||
+                host.endsWith('.oapps.fun') ||
+                isLocalhost);
+        if (!trusted)
+            return null;
+        const base = issuerBase.replace(/\/$/, '');
+        return `${base}/logout?redirect_uri=${encodeURIComponent(here.href)}`;
+    }
+    catch (_b) {
+        return null;
+    }
+}
+async function logout$1(options) {
     // Re-initialize the provider if it was cleared by a prior logout — the exact mirror
     // of login()'s self-heal above. A hosted popup/redirect login (loginWithPopup /
     // completeLoginFromRedirect) establishes a session WITHOUT touching the provider
@@ -4782,13 +4819,28 @@ async function logout$1() {
     // mistake a local-only logout for server revocation.
     const sm = core.getActiveSessionManager();
     const refreshToken = sm.getRefreshToken();
+    const sessionIssuer = sm.getIssuer();
     if (refreshToken)
-        await core.revokeSession(refreshToken, (_a = sm.getIssuer()) !== null && _a !== void 0 ? _a : undefined);
+        await core.revokeSession(refreshToken, sessionIssuer !== null && sessionIssuer !== void 0 ? sessionIssuer : undefined);
+    // Hosted sessions ('email' covers the whole hosted surface: email OTP +
+    // social + the OIDC redirect/popup flows) are the ones with an issuer
+    // cookie; wallet and guest sessions have nothing hosted to end.
+    const wasHosted = (currentAuthMethod !== null && currentAuthMethod !== void 0 ? currentAuthMethod : getStoredAuthMethod()) === 'email';
     await currentAuthProvider.logout();
     setStoredAuthMethod(null);
     currentAuthProvider = null;
     currentAuthMethod = null;
     currentAuthProviderConfigKey = null;
+    if (wasHosted && !(options === null || options === void 0 ? void 0 : options.keepIssuerSession)) {
+        const issuerBase = sessionIssuer
+            || (await core.getConfig()).humanAuthApiUrl
+            || 'https://auth.bounded.sh';
+        const bounce = issuerLogoutBounceUrl(issuerBase);
+        // Local state is already cleared, so even if the navigation is stopped
+        // (tab close, extension) the app-side logout has fully happened.
+        if (bounce)
+            window.location.href = bounce;
+    }
 }
 
 /**
@@ -4918,11 +4970,11 @@ async function login(options) {
     setCurrentUser(loggedInUser);
     return currentUser;
 }
-async function logout() {
+async function logout(options) {
     if (!authProviderInstance) {
         throw new Error('SDK not initialized. Please call init() first.');
     }
-    await logout$1();
+    await logout$1(options);
     setCurrentUser(null);
 }
 var hasRunFirstTime = false;
@@ -5313,6 +5365,31 @@ async function decideGate(appId, runId, gateId, options) {
     const { intentKey: _intentKey, idempotencyKey: _suppliedKey } = options, decision = __rest(options, ["intentKey", "idempotencyKey"]);
     return requestDevApi(`${appPath(appId)}/${encodeURIComponent(runId)}/gates/${encodeURIComponent(gateId)}/decision`, { method: 'POST', body: Object.assign(Object.assign({}, decision), { idempotencyKey }) });
 }
+async function refreshReviewCapability(appId, runId, gateId, options) {
+    const idempotencyKey = actionIdempotencyKey(options, 'refreshReviewCapability()');
+    return requestDevApi(`${appPath(appId)}/${encodeURIComponent(runId)}/gates/${encodeURIComponent(gateId)}/review-capability/refresh`, {
+        method: 'POST',
+        body: {
+            expectedGeneration: options.expectedGeneration,
+            expectedExpiresAtMs: options.expectedExpiresAtMs,
+            expectedRecoveryUntilMs: options.expectedRecoveryUntilMs,
+            expectedAudience: options.expectedAudience,
+            expectedReviewerBindingHash: options.expectedReviewerBindingHash,
+            idempotencyKey,
+        },
+    });
+}
+/**
+ * Read one exact delegated-review capability and its narrow lifecycle result.
+ * This does not refresh or extend the window and exposes no generic run-view
+ * authority.
+ */
+async function getReviewCapability(appId, runId, gateId, options) {
+    return requestDevApi(`${appPath(appId)}/${encodeURIComponent(runId)}/gates/${encodeURIComponent(gateId)}/review-capability`, {
+        method: 'POST',
+        body: { expectedPreviewUrl: options.expectedPreviewUrl },
+    });
+}
 async function topup(appId, runId, options) {
     return requestDevApi(`${appPath(appId)}/${encodeURIComponent(runId)}/topup`, { method: 'POST', body: options });
 }
@@ -5358,6 +5435,9 @@ const FAILURE_REASONS = [
     'bind_failed',
     'internal_error',
 ];
+const BUILD_REVIEW_CAPABILITY_SCHEMA = 'bounded.build-review-capability.v1';
+const BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA = 'bounded.build-review-capability-refresh.v1';
+const BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA = 'bounded.build-delegated-review-capability.v1';
 
 const NORMAL_POLL_MS = 2000;
 const PARKED_POLL_MS = 5000;
@@ -5594,22 +5674,25 @@ function useBuildRun(appId, runId, options) {
 }
 
 /**
- * Platform first-party surfaces only (bounded.sh, oapps.fun, localhost) —
- * dev-api CORS blocks calls from generated-app origins. Server-side callers unaffected.
+ * Platform first-party surfaces only (bounded.sh, oapps.fun, localhost), with
+ * one exact Drafted exception for delegated review/decision routes. Other
+ * generated-app origins remain blocked; server-side callers are unaffected.
  */
 const builds = {
     submit,
     get,
+    getReviewCapability,
     events,
     cancel,
     decideGate,
+    refreshReviewCapability,
     topup,
     list: list$1,
     watch,
 };
 
 async function create(options = {}) {
-    const body = Object.assign(Object.assign(Object.assign(Object.assign({}, (options.name !== undefined ? { name: options.name } : {})), (options.prompt !== undefined ? { prompt: options.prompt } : {})), (options.clientToken !== undefined ? { clientToken: options.clientToken } : {})), (options.intent !== undefined ? { intent: options.intent } : {}));
+    const body = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (options.name !== undefined ? { name: options.name } : {})), (options.prompt !== undefined ? { prompt: options.prompt } : {})), (options.clientToken !== undefined ? { clientToken: options.clientToken } : {})), (options.intent !== undefined ? { intent: options.intent } : {})), (options.oapp === true ? { oapp: true } : {}));
     const app = await requestDevApi('/apps/new', {
         method: 'POST',
         body,
@@ -6140,6 +6223,9 @@ function defaultInjectedEvmProvider() {
     return null;
 }
 
+exports.BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA = BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA;
+exports.BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA = BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA;
+exports.BUILD_REVIEW_CAPABILITY_SCHEMA = BUILD_REVIEW_CAPABILITY_SCHEMA;
 exports.BuildsApiError = BuildsApiError;
 exports.EMBEDDED_WALLET_UNSUPPORTED = EMBEDDED_WALLET_UNSUPPORTED;
 exports.FAILURE_REASONS = FAILURE_REASONS;
@@ -6187,4 +6273,4 @@ exports.signInAnonymously = signInAnonymously;
 exports.useAuth = useAuth;
 exports.useBuildRun = useBuildRun;
 exports.useQuery = useQuery;
-//# sourceMappingURL=index-m42Be5Oj.js.map
+//# sourceMappingURL=index-D4jNluH9.js.map