@bounded-sh/client 0.0.59 → 0.0.61

package/dist/{index.native-D48QQ0-q.js → index.native-BSheiGj2.js}

@@ -3707,6 +3707,7 @@ const OIDC_NO_WALLET = 'This login has no embedded wallet. Enable `"auth": { "wa
     'then sign from a user gesture.';
 const PKCE_STORE_KEY = 'bounded.oidc.pkce';
 const STORED_AUTH_METHOD_KEY$1 = 'bounded_last_auth_method';
+const ISSUER_SESSION_KIND_KEY$1 = 'bounded_issuer_session_kind';
 // Active session store (Web on web, RN on React Native) — selected by config,
 // not by `typeof window` (truthy on RN). OIDC redirect/popup is web-only, but the
 // session it mints is read back through this same selector everywhere.
@@ -4213,6 +4214,13 @@ async function exchangeCode(code, verifier, redirectUri) {
         getPlatform().storage.setItem(STORED_AUTH_METHOD_KEY$1, 'email');
     }
     catch ( /* storage unavailable */_b) { /* storage unavailable */ }
+    // OIDC login does establish the issuer's Better Auth browser cookie. Record
+    // that fact separately from the provider name so logout clears the cookie
+    // and returns through the registered app origin.
+    try {
+        getPlatform().storage.setItem(ISSUER_SESSION_KIND_KEY$1, 'hosted');
+    }
+    catch ( /* storage unavailable */_c) { /* storage unavailable */ }
     setCurrentUser(user);
     setAuthProviderInstance(oidcProviderSingleton);
     return user;
@@ -4229,6 +4237,7 @@ const objectIdentityKeys = new WeakMap();
 let nextObjectIdentityKey = 1;
 // --- localStorage helpers: track which auth method created the active session ---
 const STORED_AUTH_METHOD_KEY = 'bounded_last_auth_method';
+const ISSUER_SESSION_KIND_KEY = 'bounded_issuer_session_kind';
 function getStoredAuthMethod() {
     try {
         return getPlatform().storage.getItem(STORED_AUTH_METHOD_KEY);
@@ -4245,11 +4254,25 @@ function setStoredAuthMethod(method) {
         else {
             getPlatform().storage.removeItem(STORED_AUTH_METHOD_KEY);
         }
+        // Non-email providers cannot own a Better Auth browser session. Clear
+        // any prior hosted/inline classification when the active provider is
+        // replaced or the session is removed.
+        if (method !== 'email') {
+            getPlatform().storage.removeItem(ISSUER_SESSION_KIND_KEY);
+        }
     }
     catch (_a) {
         // storage might not be available
     }
 }
+function getIssuerSessionKind() {
+    try {
+        return getPlatform().storage.getItem(ISSUER_SESSION_KIND_KEY);
+    }
+    catch (_a) {
+        return null;
+    }
+}
 function getStoredIdToken() {
     try {
         return core.getActiveSessionManager().getIdToken();
@@ -4474,7 +4497,7 @@ async function getAuthProvider(config) {
             // manager as legacy email sessions. Human login should be started
             // with loginWithRedirect(); this provider is kept as the restore and
             // logout surface for those sessions.
-            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./email-auth-provider-BSw9FRjg.js'); })).EmailAuthProvider();
+            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./email-auth-provider-BttT2sZK.js'); })).EmailAuthProvider();
             break;
         case "wallet":
         case "phantom": {
@@ -4493,7 +4516,7 @@ async function getAuthProvider(config) {
             if (!isWalletLoginEnabled(config)) {
                 throw walletLoginNotEnabledError(authMethod);
             }
-            const { InjectedWalletProvider } = await Promise.resolve().then(function () { return require('./injected-wallet-provider-CmXqreEE.js'); });
+            const { InjectedWalletProvider } = await Promise.resolve().then(function () { return require('./injected-wallet-provider-BMDJntMD.js'); });
             currentAuthProvider = new InjectedWalletProvider(resolveInjectedWalletConfig(config), rpcUrl, configuredNetwork);
             break;
         }
@@ -4506,7 +4529,7 @@ async function getAuthProvider(config) {
             // Selecting authMethod:'evm-wallet' IS the opt-in — pass evmWalletConfig
             // to point at a specific wallet or set chainId/domain.
             const evmWalletConfig = ((_a = config.evmWalletConfig) !== null && _a !== void 0 ? _a : {});
-            const { InjectedEvmWalletProvider } = await Promise.resolve().then(function () { return require('./injected-evm-wallet-provider-HQMOL_mZ.js'); });
+            const { InjectedEvmWalletProvider } = await Promise.resolve().then(function () { return require('./injected-evm-wallet-provider-7XawIUdJ.js'); });
             currentAuthProvider = new InjectedEvmWalletProvider(evmWalletConfig);
             break;
         }
@@ -4534,7 +4557,7 @@ async function getAuthProvider(config) {
             break;
         case "guest":
             // Anonymous auth: a device-local ed25519 keypair signs the challenge.
-            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-Czl48mOP.js'); })).GuestAuthProvider();
+            currentAuthProvider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-BcR-MQ0g.js'); })).GuestAuthProvider();
             break;
     }
     if (!currentAuthProvider) {
@@ -4590,7 +4613,7 @@ async function signInAnonymously() {
     // Lazy-load the guest provider so its ed25519/web3 dependencies stay out of
     // the main bundle for data-only apps. Specifier is a static string literal
     // so bundle-splitting can see it.
-    const provider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-Czl48mOP.js'); })).GuestAuthProvider();
+    const provider = new (await Promise.resolve().then(function () { return require('./guest-auth-provider-BcR-MQ0g.js'); })).GuestAuthProvider();
     setAuthLoading(true); // reflect "signing in…" while the guest keypair session is minted
     const commit = (user) => {
         // No await/interleaving inside this block: provider/method/config/marker
@@ -4775,7 +4798,7 @@ function getCurrentAuthMethod() {
 // allowlist here: on a trusted origin we end the issuer session with a
 // top-level bounce; anywhere else (custom domains, http dev) we keep the
 // local-only logout instead of stranding the user on the issuer origin.
-function issuerLogoutBounceUrl(issuerBase) {
+function issuerLogoutBounceUrl(issuerBase, idTokenHint) {
     if (typeof window === 'undefined' || typeof document === 'undefined')
         return null; // RN/Node: no shared cookie jar to clear this way
     try {
@@ -4798,12 +4821,27 @@ function issuerLogoutBounceUrl(issuerBase) {
         if (!trusted)
             return null;
         const base = issuerBase.replace(/\/$/, '');
-        return `${base}/logout?redirect_uri=${encodeURIComponent(here.href)}`;
+        // #228: send the id_token_hint so the issuer can bind the post-logout redirect to this
+        // session + app + registered origin. Without it the issuer safely falls back to its own
+        // origin (it no longer trusts a bare suffix match), so the return-to-app bounce is a no-op.
+        const hint = idTokenHint ? `&id_token_hint=${encodeURIComponent(idTokenHint)}` : '';
+        return `${base}/logout?redirect_uri=${encodeURIComponent(here.href)}${hint}`;
     }
     catch (_b) {
         return null;
     }
 }
+// #228 helper, deliberately OUTSIDE logout(): the logout body is source-guarded
+// against any `catch` so a revokeSession failure can never be swallowed, and a
+// missing id token is the one benign absence worth tolerating here.
+function idTokenHintOrNull(sm) {
+    try {
+        return sm.getIdToken();
+    }
+    catch (_a) {
+        return null; /* no id token to hint with */
+    }
+}
 async function logout$1(options) {
     // Re-initialize the provider if it was cleared by a prior logout — the exact mirror
     // of login()'s self-heal above. A hosted popup/redirect login (loginWithPopup /
@@ -4828,17 +4866,20 @@ async function logout$1(options) {
     const sm = core.getActiveSessionManager();
     const refreshToken = sm.getRefreshToken();
     const sessionIssuer = sm.getIssuer();
+    // #228: capture the id token NOW, before currentAuthProvider.logout() clears the session, so we
+    // can hand it to the issuer /logout as an id_token_hint (which binds the post-logout redirect).
+    const idTokenHint = idTokenHintOrNull(sm);
     if (refreshToken)
         await core.revokeSession(refreshToken, sessionIssuer !== null && sessionIssuer !== void 0 ? sessionIssuer : undefined);
-    // Hosted sessions ('email' covers the whole hosted surface: email OTP +
-    // social + the OIDC redirect/popup flows) are the ones with an issuer
-    // cookie; wallet and guest sessions have nothing hosted to end.
-    // Check the STORED marker as well as the in-memory method: the hosted
-    // OIDC flows (loginWithPopup / completeLoginFromRedirect) write the
-    // 'email' marker via exchangeCode() but never touch currentAuthMethod,
-    // which stays 'guest'/explicit even after a hosted upgrade. Worst case of
-    // a false positive is a harmless idempotent issuer bounce.
-    const wasHosted = currentAuthMethod === 'email' || getStoredAuthMethod() === 'email';
+    // Only OIDC-hosted sessions own an issuer browser cookie. Turnkey-native
+    // email OTP is also an email auth method, but it mints the app session
+    // inline and has no issuer cookie to clear. Use the explicit session-kind
+    // marker when present. The auth-method fallback preserves correct logout
+    // behavior for hosted sessions created by older SDK versions.
+    const issuerSessionKind = getIssuerSessionKind();
+    const wasHosted = issuerSessionKind === 'hosted'
+        || (issuerSessionKind === null
+            && (currentAuthMethod === 'email' || getStoredAuthMethod() === 'email'));
     await currentAuthProvider.logout();
     setStoredAuthMethod(null);
     currentAuthProvider = null;
@@ -4848,7 +4889,7 @@ async function logout$1(options) {
         const issuerBase = sessionIssuer
             || (await core.getConfig()).humanAuthApiUrl
             || 'https://auth.bounded.sh';
-        const bounce = issuerLogoutBounceUrl(issuerBase);
+        const bounce = issuerLogoutBounceUrl(issuerBase, idTokenHint);
         // Local state is already cleared, so even if the navigation is stopped
         // (tab close, extension) the app-side logout has fully happened.
         if (bounce)
@@ -5831,30 +5872,117 @@ async function deserializeTransaction(tx) {
 // session is bound server-side to the caller's verified Bounded JWT, and the
 // destination defaults to that user's embedded wallet.
 //
+// Amount semantics:
+//   amountUsd    - exact fiat in; the fee/output breakdown comes back as `quote`.
+//   minAmountOut - a FLOOR on crypto received. The platform quotes Coinbase's
+//     worst-fee payment method (card) and pads by `slippagePad` (default 1%),
+//     so cheaper methods overshoot the floor rather than undershooting it. The
+//     floor holds unless the market moves more than the pad while the user sits
+//     on the checkout screen - which is why completion is VERIFIED: after the
+//     popup closes we poll the platform's status leg and resolve with the
+//     actual filled amount when Coinbase reports it.
+//
 // Works on Bounded-served origins (<app>.bounded.page / custom domains). On a
 // local dev origin the session endpoint does not exist; we fail with a clear
 // error rather than guessing a host.
 function hasDOM() {
     return typeof window !== 'undefined' && typeof document !== 'undefined';
 }
+async function authedFetch(path, init) {
+    const idToken = await getIdToken();
+    if (!idToken)
+        throw new Error('onramp: no active session - call login() first');
+    return fetch(`${window.location.origin}${path}`, Object.assign(Object.assign({}, init), { headers: Object.assign(Object.assign({}, init === null || init === void 0 ? void 0 : init.headers), { Authorization: `Bearer ${idToken}` }) }));
+}
+async function readError(res) {
+    var _a;
+    try {
+        return (_a = (await res.json()).error) !== null && _a !== void 0 ? _a : '';
+    }
+    catch (_b) {
+        return '';
+    }
+}
+function sessionBody(options, extra) {
+    return JSON.stringify(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (options.asset ? { asset: options.asset } : {})), (options.address ? { address: options.address } : {})), (options.amountUsd !== undefined ? { amountUsd: options.amountUsd } : {})), (options.minAmountOut !== undefined ? { minAmountOut: options.minAmountOut } : {})), (options.slippagePad !== undefined ? { slippagePad: options.slippagePad } : {})), extra));
+}
+function resolveAddress(options) {
+    var _a, _b;
+    const user = getCurrentUser();
+    const address = (_b = (_a = options.address) !== null && _a !== void 0 ? _a : user === null || user === void 0 ? void 0 : user.address) !== null && _b !== void 0 ? _b : undefined;
+    if (!address) {
+        throw new Error(user
+            ? 'onramp: the signed-in account has no wallet address - pass { address } explicitly'
+            : 'onramp: no signed-in user - call login() first or pass { address }');
+    }
+    return address;
+}
 /**
- * Open Coinbase Onramp for the signed-in user. Resolves when the popup closes.
+ * Preview a quote (fees + exact/floor output) WITHOUT opening any window or
+ * consuming a session. Show this to the user, then call onramp() to check out.
+ */
+async function onrampQuote(options = {}) {
+    if (!hasDOM())
+        throw new Error('onrampQuote is web-only');
+    resolveAddress(options);
+    const res = await authedFetch('/__bounded/onramp/session', {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: sessionBody(options, { quoteOnly: true }),
+    });
+    if (!res.ok)
+        throw new Error(`onrampQuote: failed (${res.status}${await readError(res).then((e) => (e ? `: ${e}` : ''))})`);
+    return (await res.json());
+}
+/** The signed-in user's recent onramp transactions (newest first). */
+async function onrampStatus(sinceMs) {
+    if (!hasDOM())
+        throw new Error('onrampStatus is web-only');
+    const res = await authedFetch(`/__bounded/onramp/status${sinceMs ? `?since=${Math.floor(sinceMs)}` : ''}`);
+    if (!res.ok)
+        throw new Error(`onrampStatus: failed (${res.status})`);
+    return (await res.json()).transactions;
+}
+function isSuccess(t) {
+    return /SUCCESS|COMPLETED/i.test(t.status);
+}
+function isPending(t) {
+    return /PROGRESS|PENDING|CREATED/i.test(t.status);
+}
+async function verifyCompletion(openedAt, asset, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    // 60s of clock-skew slack on `since`: Coinbase stamps server-side.
+    const since = openedAt - 60000;
+    for (;;) {
+        let sawPending = false;
+        try {
+            const txs = await onrampStatus(since);
+            const done = txs.find((t) => isSuccess(t) && (t.asset === null || t.asset === asset));
+            if (done)
+                return done;
+            sawPending = txs.some(isPending);
+        }
+        catch ( /* transient - keep polling until the deadline */_a) { /* transient - keep polling until the deadline */ }
+        // No completed fill and nothing in flight: one grace poll cycle still
+        // runs (Coinbase's record can lag the redirect), but don't burn the
+        // full window when the user plainly abandoned checkout.
+        if (Date.now() >= deadline)
+            return null;
+        if (!sawPending && Date.now() >= openedAt + 12000 && Date.now() - openedAt > timeoutMs / 2)
+            return null;
+        await new Promise((r) => setTimeout(r, 3000));
+    }
+}
+/**
+ * Open Coinbase Onramp for the signed-in user. Resolves after the window
+ * closes, with completion VERIFIED against Coinbase when possible.
  * Call from a click handler - popup blockers require user activation.
  */
 async function onramp(options = {}) {
-    var _a, _b, _c;
+    var _a;
     if (!hasDOM())
         throw new Error('onramp() is web-only');
-    const user = getCurrentUser();
-    const address = (_b = (_a = options.address) !== null && _a !== void 0 ? _a : user === null || user === void 0 ? void 0 : user.address) !== null && _b !== void 0 ? _b : undefined;
-    if (!address) {
-        throw new Error(user
-            ? 'onramp(): the signed-in account has no wallet address - pass { address } explicitly'
-            : 'onramp(): no signed-in user - call login() first or pass { address }');
-    }
-    const idToken = await getIdToken();
-    if (!idToken)
-        throw new Error('onramp(): no active session - call login() first');
+    resolveAddress(options);
     // Open the window synchronously so the click's user-activation window is not
     // consumed by the fetch below (same hard-won pattern as loginWithPopup).
     let popup = null;
@@ -5867,21 +5995,17 @@ async function onramp(options = {}) {
     }
     let session;
     try {
-        const res = await fetch(`${window.location.origin}/__bounded/onramp/session`, {
+        const res = await authedFetch('/__bounded/onramp/session', {
             method: 'POST',
-            headers: { Authorization: `Bearer ${idToken}`, 'content-type': 'application/json' },
-            body: JSON.stringify(Object.assign(Object.assign(Object.assign({}, (options.asset ? { asset: options.asset } : {})), (options.address ? { address: options.address } : {})), (options.amountUsd !== undefined ? { amountUsd: options.amountUsd } : {}))),
+            headers: { 'content-type': 'application/json' },
+            body: sessionBody(options),
         });
         if (!res.ok) {
-            let detail = '';
-            try {
-                detail = (_c = (await res.json()).error) !== null && _c !== void 0 ? _c : '';
-            }
-            catch ( /* keep status only */_d) { /* keep status only */ }
+            const detail = await readError(res);
             if (res.status === 404) {
-                throw new Error('onramp(): session endpoint not found - onramp works on Bounded-served origins (your deployed app URL), not local dev servers');
+                throw new Error('onramp: session endpoint not found - onramp works on Bounded-served origins (your deployed app URL), not local dev servers');
             }
-            throw new Error(`onramp(): session mint failed (${res.status}${detail ? `: ${detail}` : ''})`);
+            throw new Error(`onramp: session mint failed (${res.status}${detail ? `: ${detail}` : ''})`);
         }
         session = (await res.json());
     }
@@ -5889,40 +6013,47 @@ async function onramp(options = {}) {
         try {
             popup === null || popup === void 0 ? void 0 : popup.close();
         }
-        catch ( /* ignore */_e) { /* ignore */ }
+        catch ( /* ignore */_b) { /* ignore */ }
         throw error;
     }
+    const openedAt = Date.now();
+    const base = Object.assign({ address: session.address, asset: session.asset }, (session.quote ? { quote: session.quote } : {}));
     if (popup) {
         try {
             popup.location.replace(session.url);
         }
-        catch (_f) {
+        catch (_c) {
             try {
                 popup.location.href = session.url;
             }
-            catch (_g) {
+            catch (_d) {
                 try {
                     popup.close();
                 }
-                catch ( /* ignore */_h) { /* ignore */ }
-                throw new Error('onramp(): popup failed to navigate - retry with { newTab: true }');
+                catch ( /* ignore */_e) { /* ignore */ }
+                throw new Error('onramp: popup failed to navigate - retry with { newTab: true }');
             }
         }
-        return await new Promise((resolve) => {
+        await new Promise((resolve) => {
             const timer = setInterval(() => {
                 if (popup.closed) {
                     clearInterval(timer);
-                    resolve({ status: 'closed', address: session.address, asset: session.asset });
+                    resolve();
                 }
             }, 500);
         });
+        const fill = await verifyCompletion(openedAt, session.asset, (_a = options.completionTimeoutMs) !== null && _a !== void 0 ? _a : 24000);
+        if (fill) {
+            return Object.assign(Object.assign(Object.assign(Object.assign({}, base), { status: 'completed' }), (fill.amountOut !== null ? { actualOut: fill.amountOut } : {})), (fill.txHash ? { txHash: fill.txHash } : {}));
+        }
+        return Object.assign(Object.assign({}, base), { status: 'closed' });
     }
     // New-tab path (popup was blocked or explicitly requested): cross-origin tab
-    // close is not observable, so resolve immediately.
+    // close is not observable, so resolve immediately; verify via onrampStatus().
     const tab = window.open(session.url, '_blank');
     if (!tab)
-        throw new Error('onramp(): window.open was blocked - call onramp() from a click handler');
-    return { status: 'opened', address: session.address, asset: session.asset };
+        throw new Error('onramp: window.open was blocked - call onramp() from a click handler');
+    return Object.assign(Object.assign({}, base), { status: 'opened' });
 }
 
 /**
@@ -6347,6 +6478,8 @@ exports.normalizeSolanaRpcUrl = normalizeSolanaRpcUrl;
 exports.onAuthLoadingChanged = onAuthLoadingChanged;
 exports.onAuthStateChanged = onAuthStateChanged;
 exports.onramp = onramp;
+exports.onrampQuote = onrampQuote;
+exports.onrampStatus = onrampStatus;
 exports.resolveSolanaRpcUrl = resolveSolanaRpcUrl;
 exports.setAuthLoading = setAuthLoading;
 exports.setCurrentUser = setCurrentUser;
@@ -6355,4 +6488,4 @@ exports.signInAnonymously = signInAnonymously;
 exports.useAuth = useAuth;
 exports.useBuildRun = useBuildRun;
 exports.useQuery = useQuery;
-//# sourceMappingURL=index.native-D48QQ0-q.js.map
+//# sourceMappingURL=index.native-BSheiGj2.js.map