@bounded-sh/client 0.0.61 → 0.0.64

package/dist/auth/bounded-login-widget.d.ts

@@ -10,7 +10,7 @@ export interface BoundedWidgetOptions {
     title?: string;
     subtitle?: string;
     /**
-     * Login mode. Defaults to the app's init() `authMode` (usually "bounded"). In
+     * Login mode. Defaults to the app's init() `authMode` ("turnkey" when omitted). In
      * "turnkey" mode the email lane runs Turnkey-native OTP INLINE in the widget
      * (no OIDC popup); social + wallet lanes are unchanged. The widget shape and
      * look are identical in both modes.

package/dist/auth/index.d.ts

@@ -36,11 +36,10 @@ export declare function isEmailRequired(config: Partial<ClientConfig>): boolean;
  *  settings without re-plumbing them through every call. */
 export declare function getInitConfig(): Partial<ClientConfig> | null;
 /**
- * Which LOGIN mode the app runs (default "bounded"). "turnkey" opts the app into
- * Turnkey-native email OTP: the unified widget runs the code entry INLINE (no OIDC
- * popup) via startTurnkeyEmailLogin(), and Bounded mints the session from Turnkey's
- * verification. The value comes from init() config (`authMode`); a `openBoundedWidget`
- * option can override it per call. Anything other than "turnkey" is "bounded".
+ * Which LOGIN mode the app runs (default "turnkey"). Turnkey-native email OTP keeps
+ * code entry inline in the unified widget (no OIDC popup), and Bounded mints the
+ * session from Turnkey's verification. Apps can explicitly select "bounded" for the
+ * legacy Better Auth email flow. A per-call openBoundedWidget option can override it.
  */
 export declare function resolveAuthMode(config: Partial<ClientConfig>): 'bounded' | 'turnkey';
 export { SOLANA_DEVNET_RPC_URL, SOLANA_MAINNET_RPC_URL, } from "./solana-rpc";

package/dist/auth/providers/email-auth-provider.d.ts

@@ -4,10 +4,10 @@ export declare class EmailAuthProvider implements AuthProvider {
     login(): Promise<User | null>;
     restoreSession(): Promise<User | null>;
     logout(): Promise<void>;
-    signMessage(_message: string): Promise<string>;
-    runTransaction(evm?: EVMTransaction, sol?: SolTransaction, options?: SetOptions): Promise<TransactionResult>;
-    signTransaction(_t: Transaction | VersionedTransaction): Promise<Transaction | VersionedTransaction>;
-    signAndSubmitTransaction(transaction: Transaction | VersionedTransaction, _feePayer?: PublicKey): Promise<string>;
+    signMessage(message: string): Promise<string>;
+    runTransaction(evm?: EVMTransaction, sol?: SolTransaction, _options?: SetOptions): Promise<TransactionResult>;
+    signTransaction(transaction: Transaction | VersionedTransaction): Promise<Transaction | VersionedTransaction>;
+    signAndSubmitTransaction(transaction: Transaction | VersionedTransaction, feePayer?: PublicKey): Promise<string>;
     getNativeMethods(): Promise<any>;
 }
 declare const emailProviderSingleton: EmailAuthProvider;

package/dist/auth/turnkey-signer-bridge.d.ts

@@ -1,3 +1,4 @@
+import type { PublicKey, Transaction, VersionedTransaction } from '@solana/web3.js';
 export interface TurnkeySignResult {
     /** 64-byte ed25519 signature. */
     signature: Uint8Array;
@@ -10,6 +11,7 @@ export interface TurnkeyWallet {
     address: string;
     subOrgId: string;
 }
+export declare function hasTurnkeyWallet(): boolean;
 /**
  * Get-or-create the user's non-custodial Turnkey wallet, resolving with its stable
  * Solana address. On first use the popup enrolls a device passkey (Face ID / Touch ID)
@@ -30,3 +32,6 @@ export declare function getOrCreateTurnkeyWallet(): Promise<TurnkeyWallet>;
  * signatures are just a passkey approval.
  */
 export declare function signSolanaMessageViaTurnkey(message: Uint8Array): Promise<TurnkeySignResult>;
+export declare function signMessageWithTurnkey(message: string): Promise<string>;
+export declare function signTransactionWithTurnkey<T extends Transaction | VersionedTransaction>(transaction: T): Promise<T>;
+export declare function signAndSubmitTransactionWithTurnkey(transaction: Transaction | VersionedTransaction, feePayer?: PublicKey): Promise<string>;

package/dist/{email-auth-provider-9BwSziWj.js → email-auth-provider-97CluDlZ.js}

@@ -1,7 +1,7 @@
 'use strict';
 
 var core = require('@bounded-sh/core');
-var index = require('./index-C_L497w1.js');
+var index = require('./index-Bk0nEjB6.js');
 require('react');
 
 // Web uses localStorage (WebSessionManager); React Native uses the configured
@@ -10,10 +10,8 @@ require('react');
 // RN too and would wrongly route to localStorage). Same selector the core
 // request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
 const sessionManager = core.getActiveSessionManager;
-const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
-    'the app policy so email logins get a non-custodial Crossmint wallet ' +
-    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
-    'provider (e.g. Phantom) for onchain actions.';
+const NO_WALLET = 'This session has no Turnkey wallet. Sign in again to provision the default ' +
+    'embedded wallet, or check whether the app explicitly sets auth.wallets:false.';
 // ---------------------------------------------------------------------------
 // token / session helpers
 // ---------------------------------------------------------------------------
@@ -36,11 +34,13 @@ function userFromIdToken(idToken, fallbackEmail) {
     const c = decodeJwt(idToken);
     const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
     const email = (c.email || fallbackEmail || null);
-    // Email logins have no wallet — address is null (the User type allows it).
-    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
-        ? c['custom:evmWalletAddress'].toLowerCase()
-        : null;
-    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+    return {
+        id,
+        address: (c['custom:walletProvider'] === 'turnkey' && c['custom:walletAddress'] || null),
+        evmAddress: null,
+        email,
+        provider: emailProviderSingleton,
+    };
 }
 // ---------------------------------------------------------------------------
 // provider
@@ -66,32 +66,29 @@ class EmailAuthProvider {
         await sessionManager().clearSession();
         index.setCurrentUser(null);
     }
-    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
-    // raw signature — signMessage/signTransaction are structurally unsupported
-    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
-    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
-    // Bounded signer popup for wallets-enabled email logins.
-    async signMessage(_message) {
-        throw new Error(index.hasEmbeddedWallet() ? index.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    async signMessage(message) {
+        if (!index.hasTurnkeyWallet())
+            throw new Error(NO_WALLET);
+        return index.signMessageWithTurnkey(message);
     }
-    async runTransaction(evm, sol, options) {
+    async runTransaction(evm, sol, _options) {
         if (evm && sol)
             throw new Error('A transaction cannot target EVM and Solana at the same time.');
-        if (!evm)
+        if (!index.hasTurnkeyWallet())
             throw new Error(NO_WALLET);
-        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
-            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
-        if (!index.hasEmbeddedEvmWallet())
-            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
-        return index.embeddedRunEvmTransaction(evm);
+        if (evm)
+            throw new Error('Turnkey embedded wallets currently support Solana only. Connect an EVM wallet for EVM transactions.');
+        throw new Error('This Solana transaction shape is not supported by the Turnkey provider. Use a pre-built transaction.');
     }
-    async signTransaction(_t) {
-        throw new Error(index.hasEmbeddedWallet() ? index.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    async signTransaction(transaction) {
+        if (!index.hasTurnkeyWallet())
+            throw new Error(NO_WALLET);
+        return index.signTransactionWithTurnkey(transaction);
     }
-    async signAndSubmitTransaction(transaction, _feePayer) {
-        if (!index.hasEmbeddedWallet())
+    async signAndSubmitTransaction(transaction, feePayer) {
+        if (!index.hasTurnkeyWallet())
             throw new Error(NO_WALLET);
-        return index.embeddedSignAndSubmit(transaction);
+        return index.signAndSubmitTransactionWithTurnkey(transaction, feePayer);
     }
     async getNativeMethods() { return {}; }
 }
@@ -99,4 +96,4 @@ const emailProviderSingleton = new EmailAuthProvider();
 
 exports.EmailAuthProvider = EmailAuthProvider;
 exports.emailProviderSingleton = emailProviderSingleton;
-//# sourceMappingURL=email-auth-provider-9BwSziWj.js.map
+//# sourceMappingURL=email-auth-provider-97CluDlZ.js.map

package/dist/email-auth-provider-97CluDlZ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-97CluDlZ.js","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasTurnkeyWallet, signAndSubmitTransactionWithTurnkey, signMessageWithTurnkey, signTransactionWithTurnkey, } from '../turnkey-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'This session has no Turnkey wallet. Sign in again to provision the default ' +\n    'embedded wallet, or check whether the app explicitly sets auth.wallets:false.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    return {\n        id,\n        address: (c['custom:walletProvider'] === 'turnkey' && c['custom:walletAddress'] || null),\n        evmAddress: null,\n        email,\n        provider: emailProviderSingleton,\n    };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        await sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    async signMessage(message) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signMessageWithTurnkey(message);\n    }\n    async runTransaction(evm, sol, _options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        if (evm)\n            throw new Error('Turnkey embedded wallets currently support Solana only. Connect an EVM wallet for EVM transactions.');\n        throw new Error('This Solana transaction shape is not supported by the Turnkey provider. Use a pre-built transaction.');\n    }\n    async signTransaction(transaction) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signTransactionWithTurnkey(transaction);\n    }\n    async signAndSubmitTransaction(transaction, feePayer) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signAndSubmitTransactionWithTurnkey(transaction, feePayer);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":["getActiveSessionManager","getPlatform","setCurrentUser","hasTurnkeyWallet","signMessageWithTurnkey","signTransactionWithTurnkey","signAndSubmitTransactionWithTurnkey"],"mappings":";;;;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAGA,4BAAuB;AAC9C,MAAM,SAAS,GAAG,6EAA6E;AAC/F,IAAI,+EAA+E;AACnF;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAACC,iBAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD,IAAI,OAAO;AACX,QAAQ,EAAE;AACV,QAAQ,OAAO,GAAG,CAAC,CAAC,uBAAuB,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC;AAChG,QAAQ,UAAU,EAAE,IAAI;AACxB,QAAQ,KAAK;AACb,QAAQ,QAAQ,EAAE,sBAAsB;AACxC,KAAK;AACL;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQC,oBAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,MAAM,cAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQA,oBAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,IAAI,CAACC,sBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOC,4BAAsB,CAAC,OAAO,CAAC;AAC9C,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE;AAC7C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAACD,sBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,GAAG;AACf,YAAY,MAAM,IAAI,KAAK,CAAC,qGAAqG,CAAC;AAClI,QAAQ,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC;AAC/H,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,WAAW,EAAE;AACvC,QAAQ,IAAI,CAACA,sBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOE,gCAA0B,CAAC,WAAW,CAAC;AACtD,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,QAAQ,EAAE;AAC1D,QAAQ,IAAI,CAACF,sBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOG,yCAAmC,CAAC,WAAW,EAAE,QAAQ,CAAC;AACzE,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;;"}

package/dist/{email-auth-provider-BttT2sZK.js → email-auth-provider-CKM4O5Z1.js}

@@ -1,7 +1,7 @@
 'use strict';
 
 var core = require('@bounded-sh/core');
-var index_native = require('./index.native-BSheiGj2.js');
+var index_native = require('./index.native-Do-VhPUG.js');
 require('react');
 
 // Web uses localStorage (WebSessionManager); React Native uses the configured
@@ -10,10 +10,8 @@ require('react');
 // RN too and would wrongly route to localStorage). Same selector the core
 // request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
 const sessionManager = core.getActiveSessionManager;
-const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
-    'the app policy so email logins get a non-custodial Crossmint wallet ' +
-    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
-    'provider (e.g. Phantom) for onchain actions.';
+const NO_WALLET = 'This session has no Turnkey wallet. Sign in again to provision the default ' +
+    'embedded wallet, or check whether the app explicitly sets auth.wallets:false.';
 // ---------------------------------------------------------------------------
 // token / session helpers
 // ---------------------------------------------------------------------------
@@ -36,11 +34,13 @@ function userFromIdToken(idToken, fallbackEmail) {
     const c = decodeJwt(idToken);
     const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
     const email = (c.email || fallbackEmail || null);
-    // Email logins have no wallet — address is null (the User type allows it).
-    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
-        ? c['custom:evmWalletAddress'].toLowerCase()
-        : null;
-    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+    return {
+        id,
+        address: (c['custom:walletProvider'] === 'turnkey' && c['custom:walletAddress'] || null),
+        evmAddress: null,
+        email,
+        provider: emailProviderSingleton,
+    };
 }
 // ---------------------------------------------------------------------------
 // provider
@@ -66,32 +66,29 @@ class EmailAuthProvider {
         await sessionManager().clearSession();
         index_native.setCurrentUser(null);
     }
-    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
-    // raw signature — signMessage/signTransaction are structurally unsupported
-    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
-    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
-    // Bounded signer popup for wallets-enabled email logins.
-    async signMessage(_message) {
-        throw new Error(index_native.hasEmbeddedWallet() ? index_native.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    async signMessage(message) {
+        if (!index_native.hasTurnkeyWallet())
+            throw new Error(NO_WALLET);
+        return index_native.signMessageWithTurnkey(message);
     }
-    async runTransaction(evm, sol, options) {
+    async runTransaction(evm, sol, _options) {
         if (evm && sol)
             throw new Error('A transaction cannot target EVM and Solana at the same time.');
-        if (!evm)
+        if (!index_native.hasTurnkeyWallet())
             throw new Error(NO_WALLET);
-        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
-            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
-        if (!index_native.hasEmbeddedEvmWallet())
-            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
-        return index_native.embeddedRunEvmTransaction(evm);
+        if (evm)
+            throw new Error('Turnkey embedded wallets currently support Solana only. Connect an EVM wallet for EVM transactions.');
+        throw new Error('This Solana transaction shape is not supported by the Turnkey provider. Use a pre-built transaction.');
     }
-    async signTransaction(_t) {
-        throw new Error(index_native.hasEmbeddedWallet() ? index_native.EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    async signTransaction(transaction) {
+        if (!index_native.hasTurnkeyWallet())
+            throw new Error(NO_WALLET);
+        return index_native.signTransactionWithTurnkey(transaction);
     }
-    async signAndSubmitTransaction(transaction, _feePayer) {
-        if (!index_native.hasEmbeddedWallet())
+    async signAndSubmitTransaction(transaction, feePayer) {
+        if (!index_native.hasTurnkeyWallet())
             throw new Error(NO_WALLET);
-        return index_native.embeddedSignAndSubmit(transaction);
+        return index_native.signAndSubmitTransactionWithTurnkey(transaction, feePayer);
     }
     async getNativeMethods() { return {}; }
 }
@@ -99,4 +96,4 @@ const emailProviderSingleton = new EmailAuthProvider();
 
 exports.EmailAuthProvider = EmailAuthProvider;
 exports.emailProviderSingleton = emailProviderSingleton;
-//# sourceMappingURL=email-auth-provider-BttT2sZK.js.map
+//# sourceMappingURL=email-auth-provider-CKM4O5Z1.js.map

package/dist/email-auth-provider-CKM4O5Z1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-CKM4O5Z1.js","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasTurnkeyWallet, signAndSubmitTransactionWithTurnkey, signMessageWithTurnkey, signTransactionWithTurnkey, } from '../turnkey-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'This session has no Turnkey wallet. Sign in again to provision the default ' +\n    'embedded wallet, or check whether the app explicitly sets auth.wallets:false.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    return {\n        id,\n        address: (c['custom:walletProvider'] === 'turnkey' && c['custom:walletAddress'] || null),\n        evmAddress: null,\n        email,\n        provider: emailProviderSingleton,\n    };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        await sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    async signMessage(message) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signMessageWithTurnkey(message);\n    }\n    async runTransaction(evm, sol, _options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        if (evm)\n            throw new Error('Turnkey embedded wallets currently support Solana only. Connect an EVM wallet for EVM transactions.');\n        throw new Error('This Solana transaction shape is not supported by the Turnkey provider. Use a pre-built transaction.');\n    }\n    async signTransaction(transaction) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signTransactionWithTurnkey(transaction);\n    }\n    async signAndSubmitTransaction(transaction, feePayer) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signAndSubmitTransactionWithTurnkey(transaction, feePayer);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":["getActiveSessionManager","getPlatform","setCurrentUser","hasTurnkeyWallet","signMessageWithTurnkey","signTransactionWithTurnkey","signAndSubmitTransactionWithTurnkey"],"mappings":";;;;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAGA,4BAAuB;AAC9C,MAAM,SAAS,GAAG,6EAA6E;AAC/F,IAAI,+EAA+E;AACnF;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAACC,wBAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD,IAAI,OAAO;AACX,QAAQ,EAAE;AACV,QAAQ,OAAO,GAAG,CAAC,CAAC,uBAAuB,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC;AAChG,QAAQ,UAAU,EAAE,IAAI;AACxB,QAAQ,KAAK;AACb,QAAQ,QAAQ,EAAE,sBAAsB;AACxC,KAAK;AACL;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQC,2BAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,MAAM,cAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQA,2BAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,IAAI,CAACC,6BAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOC,mCAAsB,CAAC,OAAO,CAAC;AAC9C,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE;AAC7C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAACD,6BAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,GAAG;AACf,YAAY,MAAM,IAAI,KAAK,CAAC,qGAAqG,CAAC;AAClI,QAAQ,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC;AAC/H,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,WAAW,EAAE;AACvC,QAAQ,IAAI,CAACA,6BAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOE,uCAA0B,CAAC,WAAW,CAAC;AACtD,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,QAAQ,EAAE;AAC1D,QAAQ,IAAI,CAACF,6BAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAOG,gDAAmC,CAAC,WAAW,EAAE,QAAQ,CAAC;AACzE,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;;"}

package/dist/{email-auth-provider-B3XaJw-G.mjs → email-auth-provider-h0fPnU76.mjs}

@@ -1,5 +1,5 @@
 import { getActiveSessionManager } from '@bounded-sh/core';
-import { s as setCurrentUser, E as EMBEDDED_WALLET_UNSUPPORTED, h as hasEmbeddedWallet, a as hasEmbeddedEvmWallet, e as embeddedRunEvmTransaction, b as embeddedSignAndSubmit, g as getPlatform } from './index-L2R6C5Vl.mjs';
+import { s as setCurrentUser, h as hasTurnkeyWallet, a as signMessageWithTurnkey, b as signTransactionWithTurnkey, c as signAndSubmitTransactionWithTurnkey, g as getPlatform } from './index.native-CWcQMPZd.mjs';
 import 'react';
 
 // Web uses localStorage (WebSessionManager); React Native uses the configured
@@ -8,10 +8,8 @@ import 'react';
 // RN too and would wrongly route to localStorage). Same selector the core
 // request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
 const sessionManager = getActiveSessionManager;
-const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
-    'the app policy so email logins get a non-custodial Crossmint wallet ' +
-    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
-    'provider (e.g. Phantom) for onchain actions.';
+const NO_WALLET = 'This session has no Turnkey wallet. Sign in again to provision the default ' +
+    'embedded wallet, or check whether the app explicitly sets auth.wallets:false.';
 // ---------------------------------------------------------------------------
 // token / session helpers
 // ---------------------------------------------------------------------------
@@ -34,11 +32,13 @@ function userFromIdToken(idToken, fallbackEmail) {
     const c = decodeJwt(idToken);
     const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
     const email = (c.email || fallbackEmail || null);
-    // Email logins have no wallet — address is null (the User type allows it).
-    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
-        ? c['custom:evmWalletAddress'].toLowerCase()
-        : null;
-    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+    return {
+        id,
+        address: (c['custom:walletProvider'] === 'turnkey' && c['custom:walletAddress'] || null),
+        evmAddress: null,
+        email,
+        provider: emailProviderSingleton,
+    };
 }
 // ---------------------------------------------------------------------------
 // provider
@@ -64,36 +64,33 @@ class EmailAuthProvider {
         await sessionManager().clearSession();
         setCurrentUser(null);
     }
-    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
-    // raw signature — signMessage/signTransaction are structurally unsupported
-    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
-    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
-    // Bounded signer popup for wallets-enabled email logins.
-    async signMessage(_message) {
-        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    async signMessage(message) {
+        if (!hasTurnkeyWallet())
+            throw new Error(NO_WALLET);
+        return signMessageWithTurnkey(message);
     }
-    async runTransaction(evm, sol, options) {
+    async runTransaction(evm, sol, _options) {
         if (evm && sol)
             throw new Error('A transaction cannot target EVM and Solana at the same time.');
-        if (!evm)
+        if (!hasTurnkeyWallet())
             throw new Error(NO_WALLET);
-        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
-            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
-        if (!hasEmbeddedEvmWallet())
-            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
-        return embeddedRunEvmTransaction(evm);
+        if (evm)
+            throw new Error('Turnkey embedded wallets currently support Solana only. Connect an EVM wallet for EVM transactions.');
+        throw new Error('This Solana transaction shape is not supported by the Turnkey provider. Use a pre-built transaction.');
     }
-    async signTransaction(_t) {
-        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    async signTransaction(transaction) {
+        if (!hasTurnkeyWallet())
+            throw new Error(NO_WALLET);
+        return signTransactionWithTurnkey(transaction);
     }
-    async signAndSubmitTransaction(transaction, _feePayer) {
-        if (!hasEmbeddedWallet())
+    async signAndSubmitTransaction(transaction, feePayer) {
+        if (!hasTurnkeyWallet())
             throw new Error(NO_WALLET);
-        return embeddedSignAndSubmit(transaction);
+        return signAndSubmitTransactionWithTurnkey(transaction, feePayer);
     }
     async getNativeMethods() { return {}; }
 }
 const emailProviderSingleton = new EmailAuthProvider();
 
 export { EmailAuthProvider, emailProviderSingleton };
-//# sourceMappingURL=email-auth-provider-B3XaJw-G.mjs.map
+//# sourceMappingURL=email-auth-provider-h0fPnU76.mjs.map

package/dist/email-auth-provider-h0fPnU76.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-h0fPnU76.mjs","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasTurnkeyWallet, signAndSubmitTransactionWithTurnkey, signMessageWithTurnkey, signTransactionWithTurnkey, } from '../turnkey-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'This session has no Turnkey wallet. Sign in again to provision the default ' +\n    'embedded wallet, or check whether the app explicitly sets auth.wallets:false.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    return {\n        id,\n        address: (c['custom:walletProvider'] === 'turnkey' && c['custom:walletAddress'] || null),\n        evmAddress: null,\n        email,\n        provider: emailProviderSingleton,\n    };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        await sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    async signMessage(message) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signMessageWithTurnkey(message);\n    }\n    async runTransaction(evm, sol, _options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        if (evm)\n            throw new Error('Turnkey embedded wallets currently support Solana only. Connect an EVM wallet for EVM transactions.');\n        throw new Error('This Solana transaction shape is not supported by the Turnkey provider. Use a pre-built transaction.');\n    }\n    async signTransaction(transaction) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signTransactionWithTurnkey(transaction);\n    }\n    async signAndSubmitTransaction(transaction, feePayer) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signAndSubmitTransactionWithTurnkey(transaction, feePayer);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":[],"mappings":";;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,SAAS,GAAG,6EAA6E;AAC/F,IAAI,+EAA+E;AACnF;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD,IAAI,OAAO;AACX,QAAQ,EAAE;AACV,QAAQ,OAAO,GAAG,CAAC,CAAC,uBAAuB,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC;AAChG,QAAQ,UAAU,EAAE,IAAI;AACxB,QAAQ,KAAK;AACb,QAAQ,QAAQ,EAAE,sBAAsB;AACxC,KAAK;AACL;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,MAAM,cAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,sBAAsB,CAAC,OAAO,CAAC;AAC9C,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE;AAC7C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,GAAG;AACf,YAAY,MAAM,IAAI,KAAK,CAAC,qGAAqG,CAAC;AAClI,QAAQ,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC;AAC/H,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,WAAW,EAAE;AACvC,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,0BAA0B,CAAC,WAAW,CAAC;AACtD,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,QAAQ,EAAE;AAC1D,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,mCAAmC,CAAC,WAAW,EAAE,QAAQ,CAAC;AACzE,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;"}

package/dist/{email-auth-provider-Cb4VKA1E.mjs → email-auth-provider-v9xvY0Ky.mjs}

@@ -1,5 +1,5 @@
 import { getActiveSessionManager } from '@bounded-sh/core';
-import { s as setCurrentUser, E as EMBEDDED_WALLET_UNSUPPORTED, h as hasEmbeddedWallet, a as hasEmbeddedEvmWallet, e as embeddedRunEvmTransaction, b as embeddedSignAndSubmit, g as getPlatform } from './index.native-BIUs8t7F.mjs';
+import { s as setCurrentUser, h as hasTurnkeyWallet, a as signMessageWithTurnkey, b as signTransactionWithTurnkey, c as signAndSubmitTransactionWithTurnkey, g as getPlatform } from './index-7yz-Olrm.mjs';
 import 'react';
 
 // Web uses localStorage (WebSessionManager); React Native uses the configured
@@ -8,10 +8,8 @@ import 'react';
 // RN too and would wrongly route to localStorage). Same selector the core
 // request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.
 const sessionManager = getActiveSessionManager;
-const NO_WALLET = 'Email login has no embedded wallet. Enable `"auth": { "wallets": true }` in ' +
-    'the app policy so email logins get a non-custodial Crossmint wallet ' +
-    '(@user.address), then sign from a user gesture. Otherwise use a wallet ' +
-    'provider (e.g. Phantom) for onchain actions.';
+const NO_WALLET = 'This session has no Turnkey wallet. Sign in again to provision the default ' +
+    'embedded wallet, or check whether the app explicitly sets auth.wallets:false.';
 // ---------------------------------------------------------------------------
 // token / session helpers
 // ---------------------------------------------------------------------------
@@ -34,11 +32,13 @@ function userFromIdToken(idToken, fallbackEmail) {
     const c = decodeJwt(idToken);
     const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';
     const email = (c.email || fallbackEmail || null);
-    // Email logins have no wallet — address is null (the User type allows it).
-    const evmAddress = typeof c['custom:evmWalletAddress'] === 'string' && /^0x[0-9a-fA-F]{40}$/.test(c['custom:evmWalletAddress'])
-        ? c['custom:evmWalletAddress'].toLowerCase()
-        : null;
-    return { id, address: (c['custom:walletAddress'] || null), evmAddress, email, provider: emailProviderSingleton };
+    return {
+        id,
+        address: (c['custom:walletProvider'] === 'turnkey' && c['custom:walletAddress'] || null),
+        evmAddress: null,
+        email,
+        provider: emailProviderSingleton,
+    };
 }
 // ---------------------------------------------------------------------------
 // provider
@@ -64,36 +64,33 @@ class EmailAuthProvider {
         await sessionManager().clearSession();
         setCurrentUser(null);
     }
-    // Crossmint Solana smart wallets sign+submit atomically and cannot produce a
-    // raw signature — signMessage/signTransaction are structurally unsupported
-    // (throw the clear "use signAndSubmitTransaction" error when a wallet exists;
-    // the no-wallet error otherwise). signAndSubmitTransaction routes through the
-    // Bounded signer popup for wallets-enabled email logins.
-    async signMessage(_message) {
-        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    async signMessage(message) {
+        if (!hasTurnkeyWallet())
+            throw new Error(NO_WALLET);
+        return signMessageWithTurnkey(message);
     }
-    async runTransaction(evm, sol, options) {
+    async runTransaction(evm, sol, _options) {
         if (evm && sol)
             throw new Error('A transaction cannot target EVM and Solana at the same time.');
-        if (!evm)
+        if (!hasTurnkeyWallet())
             throw new Error(NO_WALLET);
-        if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false)
-            throw new Error('Embedded EVM wallets sign and submit atomically; shouldSubmitTx:false is unsupported.');
-        if (!hasEmbeddedEvmWallet())
-            throw new Error('This login has no embedded EVM wallet. Enable auth.wallets on an app with an EVM collection and sign in again.');
-        return embeddedRunEvmTransaction(evm);
+        if (evm)
+            throw new Error('Turnkey embedded wallets currently support Solana only. Connect an EVM wallet for EVM transactions.');
+        throw new Error('This Solana transaction shape is not supported by the Turnkey provider. Use a pre-built transaction.');
     }
-    async signTransaction(_t) {
-        throw new Error(hasEmbeddedWallet() ? EMBEDDED_WALLET_UNSUPPORTED : NO_WALLET);
+    async signTransaction(transaction) {
+        if (!hasTurnkeyWallet())
+            throw new Error(NO_WALLET);
+        return signTransactionWithTurnkey(transaction);
     }
-    async signAndSubmitTransaction(transaction, _feePayer) {
-        if (!hasEmbeddedWallet())
+    async signAndSubmitTransaction(transaction, feePayer) {
+        if (!hasTurnkeyWallet())
             throw new Error(NO_WALLET);
-        return embeddedSignAndSubmit(transaction);
+        return signAndSubmitTransactionWithTurnkey(transaction, feePayer);
     }
     async getNativeMethods() { return {}; }
 }
 const emailProviderSingleton = new EmailAuthProvider();
 
 export { EmailAuthProvider, emailProviderSingleton };
-//# sourceMappingURL=email-auth-provider-Cb4VKA1E.mjs.map
+//# sourceMappingURL=email-auth-provider-v9xvY0Ky.mjs.map

package/dist/email-auth-provider-v9xvY0Ky.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-auth-provider-v9xvY0Ky.mjs","sources":["../.rollup-tmp/auth/providers/email-auth-provider.js"],"sourcesContent":["import { getActiveSessionManager } from '@bounded-sh/core';\nimport { setCurrentUser } from '../../global';\nimport { getPlatform } from '../../platform';\nimport { hasTurnkeyWallet, signAndSubmitTransactionWithTurnkey, signMessageWithTurnkey, signTransactionWithTurnkey, } from '../turnkey-signer-bridge';\n// Web uses localStorage (WebSessionManager); React Native uses the configured\n// ReactNativeSessionManager. getActiveSessionManager() picks the right one by\n// whether the RN manager was configured (NOT `typeof window`, which is truthy on\n// RN too and would wrongly route to localStorage). Same selector the core\n// request path uses, so hosted Bounded Auth sessions persist + authenticate on BOTH.\nconst sessionManager = getActiveSessionManager;\nconst NO_WALLET = 'This session has no Turnkey wallet. Sign in again to provision the default ' +\n    'embedded wallet, or check whether the app explicitly sets auth.wallets:false.';\n// ---------------------------------------------------------------------------\n// token / session helpers\n// ---------------------------------------------------------------------------\nfunction decodeJwt(token) {\n    try {\n        let b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n        const pad = b64.length % 4;\n        if (pad === 2)\n            b64 += '==';\n        else if (pad === 3)\n            b64 += '=';\n        // getPlatform().atob is RN-safe (global atob is undefined on Hermes/JSC).\n        return JSON.parse(getPlatform().atob(b64));\n    }\n    catch (_a) {\n        return {};\n    }\n}\nfunction userFromIdToken(idToken, fallbackEmail) {\n    const c = decodeJwt(idToken);\n    const id = c['custom:userId'] || c.sub || c['custom:walletAddress'] || '';\n    const email = (c.email || fallbackEmail || null);\n    return {\n        id,\n        address: (c['custom:walletProvider'] === 'turnkey' && c['custom:walletAddress'] || null),\n        evmAddress: null,\n        email,\n        provider: emailProviderSingleton,\n    };\n}\n// ---------------------------------------------------------------------------\n// provider\n// ---------------------------------------------------------------------------\nexport class EmailAuthProvider {\n    async login() {\n        throw new Error('login() no longer opens inline email OTP. Use loginWithRedirect({ redirectUri }) ' +\n            'or loginWithPopup({ redirectUri }) for hosted Bounded Auth.');\n    }\n    async restoreSession() {\n        const sm = sessionManager();\n        const session = await sm.getSession();\n        if (!session)\n            return null;\n        const idToken = sm.getIdToken();\n        if (!idToken)\n            return null;\n        const user = userFromIdToken(idToken);\n        setCurrentUser(user);\n        return user;\n    }\n    async logout() {\n        await sessionManager().clearSession();\n        setCurrentUser(null);\n    }\n    async signMessage(message) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signMessageWithTurnkey(message);\n    }\n    async runTransaction(evm, sol, _options) {\n        if (evm && sol)\n            throw new Error('A transaction cannot target EVM and Solana at the same time.');\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        if (evm)\n            throw new Error('Turnkey embedded wallets currently support Solana only. Connect an EVM wallet for EVM transactions.');\n        throw new Error('This Solana transaction shape is not supported by the Turnkey provider. Use a pre-built transaction.');\n    }\n    async signTransaction(transaction) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signTransactionWithTurnkey(transaction);\n    }\n    async signAndSubmitTransaction(transaction, feePayer) {\n        if (!hasTurnkeyWallet())\n            throw new Error(NO_WALLET);\n        return signAndSubmitTransactionWithTurnkey(transaction, feePayer);\n    }\n    async getNativeMethods() { return {}; }\n}\nconst emailProviderSingleton = new EmailAuthProvider();\nexport { emailProviderSingleton };\n"],"names":[],"mappings":";;;;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,SAAS,GAAG,6EAA6E;AAC/F,IAAI,+EAA+E;AACnF;AACA;AACA;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,IAAI,IAAI;AACR,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;AAClC,QAAQ,IAAI,GAAG,KAAK,CAAC;AACrB,YAAY,GAAG,IAAI,IAAI;AACvB,aAAa,IAAI,GAAG,KAAK,CAAC;AAC1B,YAAY,GAAG,IAAI,GAAG;AACtB;AACA,QAAQ,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI;AACJ,IAAI,OAAO,EAAE,EAAE;AACf,QAAQ,OAAO,EAAE;AACjB,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;AACjD,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;AAChC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE;AAC7E,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,aAAa,IAAI,IAAI,CAAC;AACpD,IAAI,OAAO;AACX,QAAQ,EAAE;AACV,QAAQ,OAAO,GAAG,CAAC,CAAC,uBAAuB,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC;AAChG,QAAQ,UAAU,EAAE,IAAI;AACxB,QAAQ,KAAK;AACb,QAAQ,QAAQ,EAAE,sBAAsB;AACxC,KAAK;AACL;AACA;AACA;AACA;AACO,MAAM,iBAAiB,CAAC;AAC/B,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,MAAM,IAAI,KAAK,CAAC,mFAAmF;AAC3G,YAAY,6DAA6D,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,EAAE,GAAG,cAAc,EAAE;AACnC,QAAQ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,EAAE;AAC7C,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE;AACvC,QAAQ,IAAI,CAAC,OAAO;AACpB,YAAY,OAAO,IAAI;AACvB,QAAQ,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,QAAQ,OAAO,IAAI;AACnB,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,MAAM,cAAc,EAAE,CAAC,YAAY,EAAE;AAC7C,QAAQ,cAAc,CAAC,IAAI,CAAC;AAC5B,IAAI;AACJ,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE;AAC/B,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,sBAAsB,CAAC,OAAO,CAAC;AAC9C,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE;AAC7C,QAAQ,IAAI,GAAG,IAAI,GAAG;AACtB,YAAY,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC;AAC3F,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,IAAI,GAAG;AACf,YAAY,MAAM,IAAI,KAAK,CAAC,qGAAqG,CAAC;AAClI,QAAQ,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC;AAC/H,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,WAAW,EAAE;AACvC,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,0BAA0B,CAAC,WAAW,CAAC;AACtD,IAAI;AACJ,IAAI,MAAM,wBAAwB,CAAC,WAAW,EAAE,QAAQ,EAAE;AAC1D,QAAQ,IAAI,CAAC,gBAAgB,EAAE;AAC/B,YAAY,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;AACtC,QAAQ,OAAO,mCAAmC,CAAC,WAAW,EAAE,QAAQ,CAAC;AACzE,IAAI;AACJ,IAAI,MAAM,gBAAgB,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C;AACK,MAAC,sBAAsB,GAAG,IAAI,iBAAiB;;;;"}

package/dist/{guest-auth-provider-BBSFawAr.mjs → guest-auth-provider-BLRbjAv2.mjs}

@@ -1,5 +1,5 @@
 import { getActiveSessionManager, genAuthNonce, genSolanaMessage, createSessionWithSignature } from '@bounded-sh/core';
-import { g as getPlatform, i as bs58, c as setAuthLoading, s as setCurrentUser } from './index-L2R6C5Vl.mjs';
+import { g as getPlatform, i as bs58, e as setAuthLoading, s as setCurrentUser } from './index-7yz-Olrm.mjs';
 import 'react';
 
 // guest-keystore.ts — durable per-device keypair for anonymous ("guest") auth.
@@ -272,4 +272,4 @@ class GuestAuthProvider {
 }
 
 export { GuestAuthProvider };
-//# sourceMappingURL=guest-auth-provider-BBSFawAr.mjs.map
+//# sourceMappingURL=guest-auth-provider-BLRbjAv2.mjs.map