@bounded-sh/client 0.0.51 → 0.0.53-next.0

package/dist/{index-Cy0IRs6U.mjs → index-Co7IqxVo.mjs}

@@ -819,11 +819,9 @@ class OffchainAuthProvider {
     }
 }
 
-const SURFNET_RPC_URL = "https://surfpool.fly.dev";
 const SUPPORTED_SOLANA_NETWORKS = new Set([
     "solana_devnet",
     "solana_mainnet",
-    "surfnet",
 ]);
 function normalizeSolanaRpcUrl(rpcUrl) {
     if (typeof rpcUrl !== "string")
@@ -837,7 +835,7 @@ function isSupportedSolanaRpcNetwork(network) {
 function resolveSolanaRpcUrl(explicitRpcUrl, network, context) {
     if (network != null && network !== "" && !isSupportedSolanaRpcNetwork(network)) {
         throw new Error(`${context} does not support Solana network "${network}". ` +
-            `Expected one of: solana_devnet, solana_mainnet, surfnet.`);
+            `Expected one of: solana_devnet, solana_mainnet.`);
     }
     const rpcUrl = normalizeSolanaRpcUrl(explicitRpcUrl);
     if (rpcUrl)
@@ -4445,7 +4443,7 @@ async function getAuthProvider(config) {
             // manager as legacy email sessions. Human login should be started
             // with loginWithRedirect(); this provider is kept as the restore and
             // logout surface for those sessions.
-            currentAuthProvider = new (await import('./email-auth-provider-CdbhqElf.mjs')).EmailAuthProvider();
+            currentAuthProvider = new (await import('./email-auth-provider-CRFJd5Rp.mjs')).EmailAuthProvider();
             break;
         case "wallet":
         case "phantom": {
@@ -4464,7 +4462,7 @@ async function getAuthProvider(config) {
             if (!isWalletLoginEnabled(config)) {
                 throw walletLoginNotEnabledError(authMethod);
             }
-            const { InjectedWalletProvider } = await import('./injected-wallet-provider-DqBpuASt.mjs');
+            const { InjectedWalletProvider } = await import('./injected-wallet-provider-uF4yZt8l.mjs');
             currentAuthProvider = new InjectedWalletProvider(resolveInjectedWalletConfig(config), rpcUrl, configuredNetwork);
             break;
         }
@@ -4477,7 +4475,7 @@ async function getAuthProvider(config) {
             // Selecting authMethod:'evm-wallet' IS the opt-in — pass evmWalletConfig
             // to point at a specific wallet or set chainId/domain.
             const evmWalletConfig = ((_a = config.evmWalletConfig) !== null && _a !== void 0 ? _a : {});
-            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-DkyIMRce.mjs');
+            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-Bsh00akg.mjs');
             currentAuthProvider = new InjectedEvmWalletProvider(evmWalletConfig);
             break;
         }
@@ -4505,7 +4503,7 @@ async function getAuthProvider(config) {
             break;
         case "guest":
             // Anonymous auth: a device-local ed25519 keypair signs the challenge.
-            currentAuthProvider = new (await import('./guest-auth-provider-Dgmr7e0Z.mjs')).GuestAuthProvider();
+            currentAuthProvider = new (await import('./guest-auth-provider-BLzLLs7u.mjs')).GuestAuthProvider();
             break;
     }
     if (!currentAuthProvider) {
@@ -4561,7 +4559,7 @@ async function signInAnonymously() {
     // Lazy-load the guest provider so its ed25519/web3 dependencies stay out of
     // the main bundle for data-only apps. Specifier is a static string literal
     // so bundle-splitting can see it.
-    const provider = new (await import('./guest-auth-provider-Dgmr7e0Z.mjs')).GuestAuthProvider();
+    const provider = new (await import('./guest-auth-provider-BLzLLs7u.mjs')).GuestAuthProvider();
     setAuthLoading(true); // reflect "signing in…" while the guest keypair session is minted
     const commit = (user) => {
         // No await/interleaving inside this block: provider/method/config/marker
@@ -4804,7 +4802,12 @@ async function logout$1(options) {
     // Hosted sessions ('email' covers the whole hosted surface: email OTP +
     // social + the OIDC redirect/popup flows) are the ones with an issuer
     // cookie; wallet and guest sessions have nothing hosted to end.
-    const wasHosted = (currentAuthMethod !== null && currentAuthMethod !== void 0 ? currentAuthMethod : getStoredAuthMethod()) === 'email';
+    // Check the STORED marker as well as the in-memory method: the hosted
+    // OIDC flows (loginWithPopup / completeLoginFromRedirect) write the
+    // 'email' marker via exchangeCode() but never touch currentAuthMethod,
+    // which stays 'guest'/explicit even after a hosted upgrade. Worst case of
+    // a false positive is a harmless idempotent issuer bounce.
+    const wasHosted = currentAuthMethod === 'email' || getStoredAuthMethod() === 'email';
     await currentAuthProvider.logout();
     setStoredAuthMethod(null);
     currentAuthProvider = null;
@@ -5344,6 +5347,31 @@ async function decideGate(appId, runId, gateId, options) {
     const { intentKey: _intentKey, idempotencyKey: _suppliedKey } = options, decision = __rest(options, ["intentKey", "idempotencyKey"]);
     return requestDevApi(`${appPath(appId)}/${encodeURIComponent(runId)}/gates/${encodeURIComponent(gateId)}/decision`, { method: 'POST', body: Object.assign(Object.assign({}, decision), { idempotencyKey }) });
 }
+async function refreshReviewCapability(appId, runId, gateId, options) {
+    const idempotencyKey = actionIdempotencyKey(options, 'refreshReviewCapability()');
+    return requestDevApi(`${appPath(appId)}/${encodeURIComponent(runId)}/gates/${encodeURIComponent(gateId)}/review-capability/refresh`, {
+        method: 'POST',
+        body: {
+            expectedGeneration: options.expectedGeneration,
+            expectedExpiresAtMs: options.expectedExpiresAtMs,
+            expectedRecoveryUntilMs: options.expectedRecoveryUntilMs,
+            expectedAudience: options.expectedAudience,
+            expectedReviewerBindingHash: options.expectedReviewerBindingHash,
+            idempotencyKey,
+        },
+    });
+}
+/**
+ * Read one exact delegated-review capability and its narrow lifecycle result.
+ * This does not refresh or extend the window and exposes no generic run-view
+ * authority.
+ */
+async function getReviewCapability(appId, runId, gateId, options) {
+    return requestDevApi(`${appPath(appId)}/${encodeURIComponent(runId)}/gates/${encodeURIComponent(gateId)}/review-capability`, {
+        method: 'POST',
+        body: { expectedPreviewUrl: options.expectedPreviewUrl },
+    });
+}
 async function topup(appId, runId, options) {
     return requestDevApi(`${appPath(appId)}/${encodeURIComponent(runId)}/topup`, { method: 'POST', body: options });
 }
@@ -5389,6 +5417,9 @@ const FAILURE_REASONS = [
     'bind_failed',
     'internal_error',
 ];
+const BUILD_REVIEW_CAPABILITY_SCHEMA = 'bounded.build-review-capability.v1';
+const BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA = 'bounded.build-review-capability-refresh.v1';
+const BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA = 'bounded.build-delegated-review-capability.v1';
 
 const NORMAL_POLL_MS = 2000;
 const PARKED_POLL_MS = 5000;
@@ -5625,22 +5656,25 @@ function useBuildRun(appId, runId, options) {
 }
 
 /**
- * Platform first-party surfaces only (bounded.sh, oapps.fun, localhost) —
- * dev-api CORS blocks calls from generated-app origins. Server-side callers unaffected.
+ * Platform first-party surfaces only (bounded.sh, oapps.fun, localhost), with
+ * one exact Drafted exception for delegated review/decision routes. Other
+ * generated-app origins remain blocked; server-side callers are unaffected.
  */
 const builds = {
     submit,
     get,
+    getReviewCapability,
     events,
     cancel,
     decideGate,
+    refreshReviewCapability,
     topup,
     list: list$1,
     watch,
 };
 
 async function create(options = {}) {
-    const body = Object.assign(Object.assign(Object.assign(Object.assign({}, (options.name !== undefined ? { name: options.name } : {})), (options.prompt !== undefined ? { prompt: options.prompt } : {})), (options.clientToken !== undefined ? { clientToken: options.clientToken } : {})), (options.intent !== undefined ? { intent: options.intent } : {}));
+    const body = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (options.name !== undefined ? { name: options.name } : {})), (options.prompt !== undefined ? { prompt: options.prompt } : {})), (options.clientToken !== undefined ? { clientToken: options.clientToken } : {})), (options.intent !== undefined ? { intent: options.intent } : {})), (options.oapp === true ? { oapp: true } : {}));
     const app = await requestDevApi('/apps/new', {
         method: 'POST',
         body,
@@ -5906,7 +5940,7 @@ class PrivyExpoProvider {
                 };
             }
             // Sign and submit
-            const { signature, txInfo } = await this.signAndSubmitInternal(tx, wallet, rpcUrl, connection);
+            const { signature, txInfo } = await this.signAndSubmitInternal(tx, wallet, connection);
             return {
                 transactionSignature: signature,
                 blockNumber: (txInfo === null || txInfo === void 0 ? void 0 : txInfo.slot) || 0,
@@ -5986,7 +6020,7 @@ class PrivyExpoProvider {
             const { blockhash } = await connection.getLatestBlockhash('confirmed');
             versionedTx.message.recentBlockhash = blockhash;
         }
-        const { signature } = await this.signAndSubmitInternal(transaction, wallet, rpcUrl, connection);
+        const { signature } = await this.signAndSubmitInternal(transaction, wallet, connection);
         return signature;
     }
     async restoreSession() {
@@ -6038,22 +6072,10 @@ class PrivyExpoProvider {
         }
         return wallet;
     }
-    async signAndSubmitInternal(transaction, wallet, rpcUrl, connection) {
-        let signature;
-        if (rpcUrl.includes('surfpool') || rpcUrl === SURFNET_RPC_URL) {
-            // Surfnet: sign locally, then submit raw
-            const signed = await wallet.signTransaction(transaction);
-            const txSig = await connection.sendRawTransaction(signed.signedTransaction, {
-                skipPreflight: true,
-                maxRetries: 3,
-            });
-            signature = txSig;
-        }
-        else {
-            // Non-Surfnet: use Privy's combined sign+send
-            const result = await wallet.signAndSendTransaction(transaction, connection);
-            signature = result.signature;
-        }
+    async signAndSubmitInternal(transaction, wallet, connection) {
+        // Use Privy's combined sign+send
+        const result = await wallet.signAndSendTransaction(transaction, connection);
+        const signature = result.signature;
         const txInfo = await confirmAndCheckTransaction(connection, signature);
         return { signature, txInfo };
     }
@@ -6171,5 +6193,5 @@ function defaultInjectedEvmProvider() {
     return null;
 }
 
-export { loginWithPopup as A, completeLoginInPopup as B, useAuth as C, useQuery as D, EMBEDDED_WALLET_UNSUPPORTED as E, useBuildRun as F, apps as G, deserializeTransaction as H, getIdToken as I, setPlatform as J, requestEip6963Providers as K, builds as L, BuildsApiError as M, NON_TERMINAL_STATES as N, OffchainAuthProvider as O, PrivyExpoProvider as P, PARK_REASONS as Q, RUN_STATES as R, SURFNET_RPC_URL as S, TERMINAL_STATES as T, FAILURE_REASONS as U, hasEmbeddedEvmWallet as a, embeddedSignAndSubmit as b, setAuthLoading as c, defaultInjectedProvider as d, embeddedRunEvmTransaction as e, bufferExports as f, getPlatform as g, hasEmbeddedWallet as h, bs58 as i, confirmAndCheckTransaction as j, defaultInjectedEvmProvider as k, init as l, getCurrentUser as m, normalizeSolanaRpcUrl as n, onAuthStateChanged as o, onAuthLoadingChanged as p, getAuthLoading as q, resolveSolanaRpcUrl as r, setCurrentUser as s, login as t, logout as u, getAuthProvider as v, signInAnonymously as w, loginWithPrivy as x, loginWithRedirect as y, completeLoginFromRedirect as z };
-//# sourceMappingURL=index-Cy0IRs6U.mjs.map
+export { loginWithPopup as A, completeLoginInPopup as B, useAuth as C, useQuery as D, EMBEDDED_WALLET_UNSUPPORTED as E, useBuildRun as F, apps as G, deserializeTransaction as H, getIdToken as I, setPlatform as J, requestEip6963Providers as K, builds as L, BuildsApiError as M, NON_TERMINAL_STATES as N, OffchainAuthProvider as O, PrivyExpoProvider as P, PARK_REASONS as Q, RUN_STATES as R, FAILURE_REASONS as S, TERMINAL_STATES as T, BUILD_REVIEW_CAPABILITY_SCHEMA as U, BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA as V, BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA as W, hasEmbeddedEvmWallet as a, embeddedSignAndSubmit as b, setAuthLoading as c, defaultInjectedProvider as d, embeddedRunEvmTransaction as e, bufferExports as f, getPlatform as g, hasEmbeddedWallet as h, bs58 as i, confirmAndCheckTransaction as j, defaultInjectedEvmProvider as k, init as l, getCurrentUser as m, normalizeSolanaRpcUrl as n, onAuthStateChanged as o, onAuthLoadingChanged as p, getAuthLoading as q, resolveSolanaRpcUrl as r, setCurrentUser as s, login as t, logout as u, getAuthProvider as v, signInAnonymously as w, loginWithPrivy as x, loginWithRedirect as y, completeLoginFromRedirect as z };
+//# sourceMappingURL=index-Co7IqxVo.mjs.map