@bounded-sh/client 0.0.55 → 0.0.57

package/dist/index.d.ts

@@ -1,9 +1,11 @@
 export { init, getCurrentUser, onAuthStateChanged, onAuthLoadingChanged, getAuthLoading, login, logout, } from "./global";
 export type { LoginOptions, LogoutOptions } from "./global";
 export { getConfig } from "@bounded-sh/core";
-export { getAuthProvider, signInAnonymously, loginWithPrivy } from "./auth";
+export { getAuthProvider, signInAnonymously, loginWithPrivy, loginWithWallet } from "./auth";
 export { loginWithRedirect, completeLoginFromRedirect, loginWithPopup, completeLoginInPopup } from "./auth";
 export type { HostedAuthMethod, OidcLoginOptions, PopupLoginOptions } from "./auth";
+export { openBoundedWidget } from "./auth/bounded-login-widget";
+export type { BoundedWidgetOptions } from "./auth/bounded-login-widget";
 export { get, getMany, docId, set, setMany, setFile, getFiles, search, queryAggregate, runQuery, runQueryMany, runExpression, runExpressionMany, signMessage, signTransaction, signAndSubmitTransaction, count, aggregate, GetOptions, SearchOptions, SetOptions, CountOptions, AggregateOptions, AggregateOperation, AggregateResult, AggregateSpec, AggregateRow, QueryAggregateOptions, } from "@bounded-sh/core";
 export type { GetOptions as BoundedGetOptions } from "@bounded-sh/core";
 export { subscribe } from "@bounded-sh/core";
@@ -23,6 +25,10 @@ export * from "./builds";
 export { apps } from "./builds/apps";
 export type { AppListItem, CreatedApp, CreateAppOptions } from "./builds/apps";
 export { deserializeTransaction } from "./auth/providers/sol/sol-utils";
+export { signSolanaMessageViaTurnkey, getOrCreateTurnkeyWallet } from "./auth/turnkey-signer-bridge";
+export type { TurnkeySignResult, TurnkeyWallet } from "./auth/turnkey-signer-bridge";
+export { startTurnkeyEmailLogin } from "./auth/turnkey-auth";
+export type { TurnkeyEmailLoginHandle } from "./auth/turnkey-auth";
 export { getIdToken } from "./utils";
 export { setPlatform, getPlatform } from "./platform";
 export type { PlatformAdapter, StorageAdapter } from "./platform";

package/dist/index.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-CXVwyR6_.js');
+var index = require('./index-CnObYQhV.js');
 var core = require('@bounded-sh/core');
 require('react');
 
@@ -28,18 +28,23 @@ exports.getAuthLoading = index.getAuthLoading;
 exports.getAuthProvider = index.getAuthProvider;
 exports.getCurrentUser = index.getCurrentUser;
 exports.getIdToken = index.getIdToken;
+exports.getOrCreateTurnkeyWallet = index.getOrCreateTurnkeyWallet;
 exports.getPlatform = index.getPlatform;
 exports.init = index.init;
 exports.login = index.login;
 exports.loginWithPopup = index.loginWithPopup;
 exports.loginWithPrivy = index.loginWithPrivy;
 exports.loginWithRedirect = index.loginWithRedirect;
+exports.loginWithWallet = index.loginWithWallet;
 exports.logout = index.logout;
 exports.onAuthLoadingChanged = index.onAuthLoadingChanged;
 exports.onAuthStateChanged = index.onAuthStateChanged;
+exports.openBoundedWidget = index.openBoundedWidget;
 exports.requestEip6963Providers = index.requestEip6963Providers;
 exports.setPlatform = index.setPlatform;
 exports.signInAnonymously = index.signInAnonymously;
+exports.signSolanaMessageViaTurnkey = index.signSolanaMessageViaTurnkey;
+exports.startTurnkeyEmailLogin = index.startTurnkeyEmailLogin;
 exports.useAuth = index.useAuth;
 exports.useBuildRun = index.useBuildRun;
 exports.useQuery = index.useQuery;

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { W as BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA, V as BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA, U as BUILD_REVIEW_CAPABILITY_SCHEMA, M as BuildsApiError, S as FAILURE_REASONS, N as NON_TERMINAL_STATES, O as OffchainAuthProvider, Q as PARK_REASONS, P as PrivyExpoProvider, R as RUN_STATES, T as TERMINAL_STATES, G as apps, L as builds, z as completeLoginFromRedirect, B as completeLoginInPopup, k as defaultInjectedEvmProvider, d as defaultInjectedProvider, H as deserializeTransaction, q as getAuthLoading, v as getAuthProvider, m as getCurrentUser, I as getIdToken, g as getPlatform, l as init, t as login, A as loginWithPopup, x as loginWithPrivy, y as loginWithRedirect, u as logout, p as onAuthLoadingChanged, o as onAuthStateChanged, K as requestEip6963Providers, J as setPlatform, w as signInAnonymously, C as useAuth, F as useBuildRun, D as useQuery } from './index-DkdIADby.mjs';
+export { $ as BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA, _ as BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA, Z as BUILD_REVIEW_CAPABILITY_SCHEMA, T as BuildsApiError, Y as FAILURE_REASONS, U as NON_TERMINAL_STATES, P as OffchainAuthProvider, X as PARK_REASONS, Q as PrivyExpoProvider, W as RUN_STATES, V as TERMINAL_STATES, I as apps, S as builds, A as completeLoginFromRedirect, C as completeLoginInPopup, k as defaultInjectedEvmProvider, d as defaultInjectedProvider, J as deserializeTransaction, q as getAuthLoading, v as getAuthProvider, m as getCurrentUser, N as getIdToken, L as getOrCreateTurnkeyWallet, g as getPlatform, l as init, t as login, B as loginWithPopup, x as loginWithPrivy, z as loginWithRedirect, y as loginWithWallet, u as logout, p as onAuthLoadingChanged, o as onAuthStateChanged, D as openBoundedWidget, R as requestEip6963Providers, O as setPlatform, w as signInAnonymously, K as signSolanaMessageViaTurnkey, M as startTurnkeyEmailLogin, F as useAuth, H as useBuildRun, G as useQuery } from './index-C7rOe6B2.mjs';
 export * from '@bounded-sh/core';
 export { BoundedDeclineError, DECLINE_EVENT_NAME, RATE_LIMIT_EVENT_NAME, ScopedClientReadOnlyError, aggregate, count, createClient, deriveDecline, dispatchDeclineEvent, dispatchRateLimitEvent, docId, get, getConfig, getFiles, getMany, queryAggregate, runExpression, runExpressionMany, runQuery, runQueryMany, search, set, setFile, setMany, signAndSubmitTransaction, signMessage, signTransaction, subscribe } from '@bounded-sh/core';
 import 'react';

package/dist/{index-DkdIADby.mjs → index.native-CQiw9baS.mjs}

@@ -3809,6 +3809,11 @@ function appendHostedLoginHints(params, opts) {
     const provider = normalizeMethod(opts.provider);
     if (provider)
         params.set('bounded_provider', provider);
+    // login_hint: an identifier (usually an email) to prefill on the hosted page.
+    // Kept short and free of control chars; the hosted page validates before use.
+    const hint = String(opts.loginHint || '').trim();
+    if (hint && hint.length <= 320 && !/[\s<>"']/.test(hint))
+        params.set('login_hint', hint);
     // Standard OIDC prompt (e.g. 'login' to force a fresh sign-in / account choice).
     const prompt = normalizeMethod(opts.prompt);
     if (prompt)
@@ -4443,7 +4448,7 @@ async function getAuthProvider(config) {
             // manager as legacy email sessions. Human login should be started
             // with loginWithRedirect(); this provider is kept as the restore and
             // logout surface for those sessions.
-            currentAuthProvider = new (await import('./email-auth-provider-yBbGzH2e.mjs')).EmailAuthProvider();
+            currentAuthProvider = new (await import('./email-auth-provider-CfNSS8Du.mjs')).EmailAuthProvider();
             break;
         case "wallet":
         case "phantom": {
@@ -4462,7 +4467,7 @@ async function getAuthProvider(config) {
             if (!isWalletLoginEnabled(config)) {
                 throw walletLoginNotEnabledError(authMethod);
             }
-            const { InjectedWalletProvider } = await import('./injected-wallet-provider-BhpwmpgW.mjs');
+            const { InjectedWalletProvider } = await import('./injected-wallet-provider-Bps6a9IP.mjs');
             currentAuthProvider = new InjectedWalletProvider(resolveInjectedWalletConfig(config), rpcUrl, configuredNetwork);
             break;
         }
@@ -4475,7 +4480,7 @@ async function getAuthProvider(config) {
             // Selecting authMethod:'evm-wallet' IS the opt-in — pass evmWalletConfig
             // to point at a specific wallet or set chainId/domain.
             const evmWalletConfig = ((_a = config.evmWalletConfig) !== null && _a !== void 0 ? _a : {});
-            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-D7fd42En.mjs');
+            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-DCGnUedJ.mjs');
             currentAuthProvider = new InjectedEvmWalletProvider(evmWalletConfig);
             break;
         }
@@ -4503,7 +4508,7 @@ async function getAuthProvider(config) {
             break;
         case "guest":
             // Anonymous auth: a device-local ed25519 keypair signs the challenge.
-            currentAuthProvider = new (await import('./guest-auth-provider-BnugW3TI.mjs')).GuestAuthProvider();
+            currentAuthProvider = new (await import('./guest-auth-provider-DxhZ5sWN.mjs')).GuestAuthProvider();
             break;
     }
     if (!currentAuthProvider) {
@@ -4559,7 +4564,7 @@ async function signInAnonymously() {
     // Lazy-load the guest provider so its ed25519/web3 dependencies stay out of
     // the main bundle for data-only apps. Specifier is a static string literal
     // so bundle-splitting can see it.
-    const provider = new (await import('./guest-auth-provider-BnugW3TI.mjs')).GuestAuthProvider();
+    const provider = new (await import('./guest-auth-provider-DxhZ5sWN.mjs')).GuestAuthProvider();
     setAuthLoading(true); // reflect "signing in…" while the guest keypair session is minted
     const commit = (user) => {
         // No await/interleaving inside this block: provider/method/config/marker
@@ -5421,9 +5426,11 @@ const BUILD_REVIEW_CAPABILITY_SCHEMA = 'bounded.build-review-capability.v1';
 const BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA = 'bounded.build-review-capability-refresh.v1';
 const BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA = 'bounded.build-delegated-review-capability.v1';
 
+const FAST_POLL_MS = 1000;
 const NORMAL_POLL_MS = 2000;
 const PARKED_POLL_MS = 5000;
 const LONG_RUNNING_POLL_MS = 10000;
+const THIRTY_SECONDS_MS = 30000;
 const TWO_MINUTES_MS = 2 * 60000;
 const TEN_MINUTES_MS = 10 * 60000;
 const terminalStates = new Set(TERMINAL_STATES);
@@ -5432,6 +5439,10 @@ function pollCadence(state, elapsedMs) {
         return LONG_RUNNING_POLL_MS;
     if ((state === null || state === void 0 ? void 0 : state.startsWith('parked')) || elapsedMs >= TWO_MINUTES_MS)
         return PARKED_POLL_MS;
+    // The first 30s is where the user is staring at "waiting for a build slot" /
+    // "building" and every transition matters most; poll fast, then relax.
+    if (elapsedMs < THIRTY_SECONDS_MS)
+        return FAST_POLL_MS;
     return NORMAL_POLL_MS;
 }
 function retryCadence(error, state, elapsedMs) {
@@ -5517,9 +5528,18 @@ function watch(appId, runId, onUpdate, options = {}) {
     const poll = async () => {
         if (!active)
             return;
+        // Fire the view and the events page concurrently: the events cursor (lastSeq)
+        // does not depend on the run view, so there is no reason to pay two serial
+        // round-trips per tick. Error semantics below are unchanged — the run result
+        // still gates, and a failed events page still publishes the run with no rows.
+        const runPromise = get(appId, runId);
+        const eventsPromise = events(appId, runId, lastSeq);
+        // Keep the in-flight events page from becoming an unhandled rejection if the
+        // run result makes us bail before awaiting it; the real await below still sees it.
+        eventsPromise.catch(() => { });
         let run;
         try {
-            const view = await get(appId, runId);
+            const view = await runPromise;
             if (!active)
                 return;
             run = view.run;
@@ -5537,7 +5557,7 @@ function watch(appId, runId, onUpdate, options = {}) {
             return;
         }
         try {
-            const response = await events(appId, runId, lastSeq);
+            const response = await eventsPromise;
             if (!active)
                 return;
             const deduped = newEvents(Array.isArray(response.events) ? response.events : [], lastSeq, seenSeqs);
@@ -6129,90 +6149,5 @@ class PrivyExpoProvider {
     }
 }
 
-/**
- * Default provider discovery: Phantom-first, then any Wallet-Standard
- * `window.solana`. Kept tiny + synchronous (no heavy imports) so it works inside
- * a user gesture and can be eagerly exported from the SDK entry.
- */
-function defaultInjectedProvider() {
-    var _a;
-    if (typeof window === 'undefined')
-        return null;
-    const w = window;
-    const phantom = (_a = w === null || w === void 0 ? void 0 : w.phantom) === null || _a === void 0 ? void 0 : _a.solana;
-    if (phantom && typeof phantom.signMessage === 'function')
-        return phantom;
-    const generic = w === null || w === void 0 ? void 0 : w.solana;
-    if (generic && typeof generic.signMessage === 'function')
-        return generic;
-    return null;
-}
-
-// injected-evm-wallet-types.ts — tiny, dependency-free surface for the EVM
-// WALLET LOGIN path (BYO wallet via SIWE). The EVM twin of
-// injected-wallet-types.ts: kept separate from injected-evm-wallet-provider.ts
-// so the SDK entry can eagerly export the type surface + the provider-discovery
-// helper WITHOUT dragging the provider class into the default bundle. The
-// provider is lazy-loaded by getAuthProvider() when an app opts into
-// authMethod:'evm-wallet'.
-//
-// It rides the standard EIP-1193 injected provider a browser wallet exposes
-// (MetaMask / Rabby / Coinbase Wallet / any window.ethereum), discovered via
-// EIP-6963 (multi-wallet, collision-free) with a window.ethereum fallback. It
-// needs NO viem/ethers and NO React — EIP-1193 request() + hex strings suffice.
-// EIP-6963 is announcement-based: wallets add an `eip6963:requestProvider`
-// listener and synchronously dispatch `eip6963:announceProvider` in response. We
-// keep a persistent collector so announcements (including late ones) are
-// captured, and re-request on demand.
-const announcedProviders = [];
-let announceListenerAttached = false;
-function attachAnnounceListener() {
-    if (announceListenerAttached || typeof window === 'undefined')
-        return;
-    announceListenerAttached = true;
-    window.addEventListener('eip6963:announceProvider', (event) => {
-        const detail = event === null || event === void 0 ? void 0 : event.detail;
-        if (detail &&
-            detail.provider &&
-            typeof detail.provider.request === 'function' &&
-            !announcedProviders.some((d) => { var _a, _b; return ((_a = d.info) === null || _a === void 0 ? void 0 : _a.uuid) === ((_b = detail.info) === null || _b === void 0 ? void 0 : _b.uuid); })) {
-            announcedProviders.push(detail);
-        }
-    });
-}
-/**
- * Request + collect EIP-6963 providers. Dispatches `eip6963:requestProvider`
- * (synchronous — already-loaded wallets announce in the same tick) and returns
- * every wallet announced so far. Kept synchronous so it works inside a user
- * gesture and can be eagerly exported from the SDK entry.
- */
-function requestEip6963Providers() {
-    if (typeof window === 'undefined')
-        return [];
-    attachAnnounceListener();
-    try {
-        window.dispatchEvent(new Event('eip6963:requestProvider'));
-    }
-    catch (_a) {
-        /* older browsers without Event constructor — fall through to window.ethereum */
-    }
-    return announcedProviders.slice();
-}
-/**
- * Default EVM provider discovery: EIP-6963 first (multi-wallet, collision-free),
- * then legacy `window.ethereum`. Returns null when no injected wallet is present.
- */
-function defaultInjectedEvmProvider() {
-    if (typeof window === 'undefined')
-        return null;
-    const details = requestEip6963Providers();
-    if (details.length > 0)
-        return details[0].provider;
-    const eth = window.ethereum;
-    if (eth && typeof eth.request === 'function')
-        return eth;
-    return null;
-}
-
-export { loginWithPopup as A, completeLoginInPopup as B, useAuth as C, useQuery as D, EMBEDDED_WALLET_UNSUPPORTED as E, useBuildRun as F, apps as G, deserializeTransaction as H, getIdToken as I, setPlatform as J, requestEip6963Providers as K, builds as L, BuildsApiError as M, NON_TERMINAL_STATES as N, OffchainAuthProvider as O, PrivyExpoProvider as P, PARK_REASONS as Q, RUN_STATES as R, FAILURE_REASONS as S, TERMINAL_STATES as T, BUILD_REVIEW_CAPABILITY_SCHEMA as U, BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA as V, BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA as W, hasEmbeddedEvmWallet as a, embeddedSignAndSubmit as b, setAuthLoading as c, defaultInjectedProvider as d, embeddedRunEvmTransaction as e, bufferExports as f, getPlatform as g, hasEmbeddedWallet as h, bs58 as i, confirmAndCheckTransaction as j, defaultInjectedEvmProvider as k, init as l, getCurrentUser as m, normalizeSolanaRpcUrl as n, onAuthStateChanged as o, onAuthLoadingChanged as p, getAuthLoading as q, resolveSolanaRpcUrl as r, setCurrentUser as s, login as t, logout as u, getAuthProvider as v, signInAnonymously as w, loginWithPrivy as x, loginWithRedirect as y, completeLoginFromRedirect as z };
-//# sourceMappingURL=index-DkdIADby.mjs.map
+export { useAuth as A, useQuery as B, useBuildRun as C, apps as D, EMBEDDED_WALLET_UNSUPPORTED as E, deserializeTransaction as F, getIdToken as G, setPlatform as H, builds as I, BuildsApiError as J, PARK_REASONS as K, FAILURE_REASONS as L, BUILD_REVIEW_CAPABILITY_SCHEMA as M, NON_TERMINAL_STATES as N, OffchainAuthProvider as O, PrivyExpoProvider as P, BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA as Q, RUN_STATES as R, BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA as S, TERMINAL_STATES as T, hasEmbeddedEvmWallet as a, embeddedSignAndSubmit as b, setAuthLoading as c, bufferExports as d, embeddedRunEvmTransaction as e, bs58 as f, getPlatform as g, hasEmbeddedWallet as h, confirmAndCheckTransaction as i, init as j, getCurrentUser as k, onAuthLoadingChanged as l, getAuthLoading as m, normalizeSolanaRpcUrl as n, onAuthStateChanged as o, login as p, logout as q, resolveSolanaRpcUrl as r, setCurrentUser as s, getAuthProvider as t, signInAnonymously as u, loginWithPrivy as v, loginWithRedirect as w, completeLoginFromRedirect as x, loginWithPopup as y, completeLoginInPopup as z };
+//# sourceMappingURL=index.native-CQiw9baS.mjs.map