@bounded-sh/client 0.0.97 → 0.0.98

package/dist/{index-C01Q7k1A.mjs → index-Cflemdaf.mjs}

@@ -5828,7 +5828,7 @@ async function getAuthProvider(config) {
             // manager as legacy email sessions. Human login should be started
             // with loginWithRedirect(); this provider is kept as the restore and
             // logout surface for those sessions.
-            currentAuthProvider = new (await import('./email-auth-provider-DbBN1MXS.mjs')).EmailAuthProvider();
+            currentAuthProvider = new (await import('./email-auth-provider-DF7Urh8i.mjs')).EmailAuthProvider();
             break;
         case "phantom": {
             // First-class Solana WALLET LOGIN (the poof/TaroBase-style "connect
@@ -5870,7 +5870,7 @@ async function getAuthProvider(config) {
             // (bounded-login-widget.ts), so registration never counts as
             // evidence the user has a wallet.
             await ensureSolanaMobileWalletRegistered(config, configuredNetwork);
-            const { InjectedWalletProvider } = await import('./injected-wallet-provider-DCaT1pKl.mjs');
+            const { InjectedWalletProvider } = await import('./injected-wallet-provider-Dlo96aV9.mjs');
             currentAuthProvider = new InjectedWalletProvider(resolveInjectedWalletConfig(config), rpcUrl, configuredNetwork);
             break;
         }
@@ -5883,7 +5883,7 @@ async function getAuthProvider(config) {
             // Selecting authMethod:'evm-wallet' IS the opt-in — pass evmWalletConfig
             // to point at a specific wallet or set chainId/domain.
             const evmWalletConfig = ((_a = config.evmWalletConfig) !== null && _a !== void 0 ? _a : {});
-            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-DIMM0HdQ.mjs');
+            const { InjectedEvmWalletProvider } = await import('./injected-evm-wallet-provider-CMqUqqxN.mjs');
             currentAuthProvider = new InjectedEvmWalletProvider(evmWalletConfig);
             break;
         }
@@ -5908,7 +5908,7 @@ async function getAuthProvider(config) {
             break;
         case "guest":
             // Anonymous auth: a device-local ed25519 keypair signs the challenge.
-            currentAuthProvider = new (await import('./guest-auth-provider-KCalcsKu.mjs')).GuestAuthProvider();
+            currentAuthProvider = new (await import('./guest-auth-provider-DVw-tITC.mjs')).GuestAuthProvider();
             break;
     }
     if (!currentAuthProvider) {
@@ -5970,7 +5970,7 @@ async function signInAnonymously() {
     // Lazy-load the guest provider so its ed25519/web3 dependencies stay out of
     // the main bundle for data-only apps. Specifier is a static string literal
     // so bundle-splitting can see it.
-    const provider = new (await import('./guest-auth-provider-KCalcsKu.mjs')).GuestAuthProvider();
+    const provider = new (await import('./guest-auth-provider-DVw-tITC.mjs')).GuestAuthProvider();
     setAuthLoading(true); // reflect "signing in…" while the guest keypair session is minted
     // adoptSessionProvider awaits only getConfig() (already resolved here) and then
     // runs every write - provider/method/config/marker/user - in one synchronous
@@ -6141,7 +6141,7 @@ function ensureSharedWalletLoginReady() {
     if (!sharedWalletReady) {
         sharedWalletReady = (async () => {
             await getConfig();
-            await import('./injected-wallet-provider-DCaT1pKl.mjs');
+            await import('./injected-wallet-provider-Dlo96aV9.mjs');
         })().catch((error) => {
             sharedWalletReady = null;
             throw error;
@@ -6244,7 +6244,7 @@ async function loginWithWallet(options) {
         await ensureSharedWalletLoginReady();
     else
         await ensureWalletLoginReady();
-    const { InjectedWalletProvider } = await import('./injected-wallet-provider-DCaT1pKl.mjs');
+    const { InjectedWalletProvider } = await import('./injected-wallet-provider-Dlo96aV9.mjs');
     // Keep the RAW wallet provider: the offchain wrapper forwards only a fixed
     // set of methods, so cleanup below must speak to the provider that actually
     // holds the config rather than to whatever is wrapping it.
@@ -7545,6 +7545,12 @@ function runOtpFrame(run) {
             const d = event.data;
             if (!d || typeof d !== 'object')
                 return;
+            if (d.type === 'bounded:otp:resize') {
+                if (typeof d.height === 'number' && Number.isFinite(d.height) && d.height > 0) {
+                    run.iframe.style.height = `${Math.max(140, Math.min(680, Math.ceil(d.height)))}px`;
+                }
+                return;
+            }
             if (d.type === 'bounded:otp:ready') {
                 if (started)
                     return;
@@ -7594,8 +7600,7 @@ function runOtpFrame(run) {
                 reject(new Error(String((d && d.error) || 'Invalid or expired code.')));
                 return;
             }
-            // 'bounded:otp:resize' / 'bounded:otp:registered' are advisory; the widget host may size the
-            // frame from resize, but login does not depend on them.
+            // 'bounded:otp:registered' is advisory; login does not depend on it.
         };
         const post = (msg) => {
             var _a;
@@ -8084,6 +8089,7 @@ async function prepareAndOpen(opts, pending) {
         m.onBackdrop = cancel;
         const style = el("style");
         style.textContent = CARD_CSS;
+        let emailDraft = "";
         const renderChoose = () => {
             const card = el("div", "c");
             card.appendChild(style.cloneNode(true));
@@ -8118,6 +8124,8 @@ async function prepareAndOpen(opts, pending) {
                 input.autocomplete = "email";
                 input.placeholder = "you@example.com";
                 input.required = true;
+                input.value = emailDraft;
+                input.addEventListener("input", () => { emailDraft = input.value; });
                 const submit = el("button", "btn primary");
                 submit.type = "submit";
                 submit.textContent = "Continue";
@@ -8126,6 +8134,7 @@ async function prepareAndOpen(opts, pending) {
                     e.preventDefault();
                     if (!input.value)
                         return;
+                    emailDraft = input.value;
                     // Starting another lane takes the card from a wallet attempt still
                     // preparing, and this lane holds the lock until its own request
                     // settles - otherwise a failed email login would keep every other lane
@@ -8155,6 +8164,7 @@ async function prepareAndOpen(opts, pending) {
                     setBusy(submit, "Opening secure sign-in\u2026");
                     const emailOpts = {
                         provider: "email",
+                        prompt: "login",
                         loginHint: input.value,
                         redirectUri: opts.redirectUri,
                     };
@@ -8436,13 +8446,11 @@ async function prepareAndOpen(opts, pending) {
             const back = el("button", "back", "\u2190 Back");
             back.type = "button";
             card.appendChild(back);
-            card.appendChild(el("h1", undefined, "Enter your code"));
-            card.appendChild(el("p", "sub", `We sent a 6-digit code to ${handle.email}.`));
             const status = el("div", "status");
             const setErr = (msg) => { status.textContent = msg; status.classList.add("err"); };
             // The Bounded-origin OTP frame. Its route restricts frame-ancestors to this exact origin, so
-            // only this app may embed it; the code + the P-256 key never leave it into this realm. A fixed
-            // height comfortably fits the frame's code card (heading + input + button + status).
+            // only this app may embed it; the code + the P-256 key never leave it into this realm.
+            // Its trusted resize messages fit the heading, input, and any error copy.
             const frame = document.createElement("iframe");
             frame.setAttribute("title", "Enter your code");
             frame.style.cssText = "width:100%;height:210px;border:0;background:transparent;color-scheme:dark";
@@ -10112,4 +10120,4 @@ function defaultInjectedEvmProvider() {
 }
 
 export { OffchainAuthProvider as $, getAuthProvider as A, signInAnonymously as B, loginWithPrivy as C, loginWithWallet as D, ensureWalletLoginReady as E, ensureSharedWalletLoginReady as F, preloadWalletLogin as G, loginWithRedirect as H, completeLoginFromRedirect as I, loginWithPopup as J, completeLoginInPopup as K, openBoundedWidget as L, ensureSignedIn as M, useAuth as N, useQuery as O, useBuildRun as P, apps as Q, signSolanaMessageViaTurnkey as R, getOrCreateTurnkeyWallet as S, openTurnkeyKeyExport as T, startTurnkeyEmailLogin as U, getIdToken as V, WalletConfigError as W, onramp as X, onrampQuote as Y, onrampStatus as Z, setPlatform as _, signMessageWithTurnkey as a, PrivyExpoProvider as a0, requestEip6963Providers as a1, builds as a2, BuildsApiError as a3, NON_TERMINAL_STATES as a4, TERMINAL_STATES as a5, RUN_STATES as a6, PARK_REASONS as a7, FAILURE_REASONS as a8, BUILD_REVIEW_CAPABILITY_SCHEMA as a9, BUILD_REVIEW_CAPABILITY_REFRESH_SCHEMA as aa, BUILD_DELEGATED_REVIEW_CAPABILITY_SCHEMA as ab, signTransactionWithTurnkey as b, signTransactionV1WithTurnkey as c, signAndSubmitTransactionWithTurnkey as d, bs58 as e, defaultInjectedProvider as f, getPlatform as g, hasTurnkeyWallet as h, firstStandardWalletProvider as i, setAuthLoading as j, bufferExports as k, setStoredAuthMethod as l, confirmAndCheckTransaction as m, normalizeSolanaRpcUrl as n, defaultInjectedEvmProvider as o, init as p, getCurrentUser as q, resolveSolanaRpcUrl as r, setCurrentUser as s, transactionHasSignature as t, onAuthStateChanged as u, onAuthLoadingChanged as v, getAuthLoading as w, waitForAuthReady as x, login as y, logout as z };
-//# sourceMappingURL=index-C01Q7k1A.mjs.map
+//# sourceMappingURL=index-Cflemdaf.mjs.map