@defdone/annon 0.1.0-alpha.0 → 0.1.0-alpha.1

package/dist/browser/login.js

@@ -1,5 +1,3 @@
-import { setupWalletSelector } from '@near-wallet-selector/core';
-import { setupMyNearWallet } from '@near-wallet-selector/my-near-wallet';
 import { Buffer } from 'buffer';
 import { signInAccountOnly } from '../wallet/account-only.js';
 import { evmWallet } from '../wallet/wallet.js';
@@ -8,6 +6,27 @@ const pair = document.getElementById('pair');
 const display = document.getElementById('action');
 const status = document.getElementById('status');
 const approve = document.getElementById('approve');
+const nearChoice = document.getElementById('near-wallet');
+const hotChoice = document.getElementById('near-wallet-hot');
+/** Signing-request chains the page can bind a NEAR wallet to. Anything else is refused. */
+const NEAR_NETWORKS = new Map([
+    ['near:mainnet', 'mainnet'],
+    ['near:testnet', 'testnet'],
+]);
+/** The selector's only RPC per network. The page CSP allows exactly these (browser-login.ts). */
+const NEAR_RPC = {
+    mainnet: 'https://free.rpc.fastnear.com',
+    testnet: 'https://test.rpc.fastnear.com',
+};
+/**
+ * NEAR wallets offered on this page and the networks each is bound to. MyNearWallet is retired
+ * and no longer connects to apps. HOT's selector module sends no network with its requests, so
+ * it is offered for mainnet only and never loaded for another network.
+ */
+const NEAR_WALLETS = new Map([
+    ['meteor-wallet', { name: 'Meteor Wallet', networks: ['mainnet', 'testnet'] }],
+    ['hot-wallet', { name: 'HOT Wallet', networks: ['mainnet'] }],
+]);
 const fragment = new URLSearchParams(location.hash.slice(1));
 const redirected = location.pathname === '/callback';
 let capability = redirected ? '' : location.hash.slice(1);
@@ -69,6 +88,9 @@ async function poll() {
         current = r.action ?? undefined;
         display.textContent = current ? JSON.stringify(current, null, 2) : 'Waiting for the CLI…';
         approve.disabled = !current || used.has(current.id);
+        if (hotChoice)
+            hotChoice.disabled =
+                current?.chain?.startsWith('near:') === true && current.chain !== 'near:mainnet';
         setTimeout(() => {
             void poll();
         }, 1000);
@@ -108,12 +130,29 @@ approve.onclick = async () => {
                     : { signature: await wallet.signTypedData(q.payload) };
         }
         else {
-            const networkId = q.chain === 'near:mainnet' ? 'mainnet' : 'testnet';
+            const networkId = NEAR_NETWORKS.get(q.chain);
+            if (!networkId)
+                throw new Error(`Browser NEAR wallets support near:mainnet and near:testnet, not ${q.chain}.`);
+            const id = nearChoice?.value || 'meteor-wallet';
+            const offered = NEAR_WALLETS.get(id);
+            if (!offered)
+                throw new Error('Unknown NEAR wallet');
+            if (!offered.networks.includes(networkId))
+                throw new Error(`${offered.name} is offered for near:mainnet only. Pick Meteor Wallet.`);
+            // Only the chosen wallet is loaded, on first use: the page starts without wallet code
+            // touching storage or listeners, and a refused wallet never runs.
+            const [{ setupWalletSelector }, module] = await Promise.all([
+                import('@near-wallet-selector/core'),
+                id === 'hot-wallet'
+                    ? import('@near-wallet-selector/hot-wallet').then((m) => m.setupHotWallet())
+                    : import('@near-wallet-selector/meteor-wallet').then((m) => m.setupMeteorWallet()),
+            ]);
             const selector = await setupWalletSelector({
                 network: networkId,
-                modules: [setupMyNearWallet()],
+                fallbackRpcUrls: [NEAR_RPC[networkId]],
+                modules: [module],
             });
-            const wallet = await selector.wallet('my-near-wallet');
+            const wallet = await selector.wallet(id);
             const accounts = await signInAccountOnly(wallet);
             const account = q.account || accounts[0]?.accountId;
             if (!account || !accounts.some((a) => a.accountId === account))
@@ -130,7 +169,7 @@ approve.onclick = async () => {
                     state,
                 });
                 if (!signed)
-                    return; // redirect wallet: /callback forwards fragment
+                    return; // redirect wallets: /callback forwards the fragment
                 callbacks.delete(state);
                 result = signed;
             }