@hfunlabs/hypurr-connect 0.1.8 → 0.1.10

package/dist/index.js

@@ -3,7 +3,10 @@ import {
   ExchangeClient,
   HttpTransport
 } from "@hfunlabs/hyperliquid";
-import { PrivateKeySigner, signUserSignedAction } from "@hfunlabs/hyperliquid/signing";
+import {
+  PrivateKeySigner,
+  signUserSignedAction
+} from "@hfunlabs/hyperliquid/signing";
 import {
   createContext,
   useCallback,
@@ -80,10 +83,10 @@ function isDeadAgentError(err) {
 import { GrpcWebFetchTransport } from "@protobuf-ts/grpcweb-transport";
 import { StaticClient } from "hypurr-grpc/ts/hypurr/static/static_service.client";
 import { TelegramClient } from "hypurr-grpc/ts/hypurr/telegram/telegram_service.client";
-var GRPC_URL = "https://grpc.hypurr.fun";
+var DEFAULT_GRPC_URL = "https://grpc.hypurr.fun";
 function createTransport(config) {
   return new GrpcWebFetchTransport({
-    baseUrl: GRPC_URL,
+    baseUrl: config.grpcUrl ?? DEFAULT_GRPC_URL,
     timeout: config.grpcTimeout ?? 15e3
   });
 }
@@ -98,14 +101,16 @@ function createStaticClient(config) {
 var GrpcExchangeTransport = class {
   isTestnet;
   telegramClient;
-  authDataMap;
+  rpcOptions;
   walletId;
   infoUrl;
+  onAuthError;
   constructor(config) {
     this.isTestnet = config.isTestnet ?? false;
     this.telegramClient = config.telegramClient;
-    this.authDataMap = config.authDataMap;
+    this.rpcOptions = config.rpcOptions;
     this.walletId = config.walletId;
+    this.onAuthError = config.onAuthError;
     this.infoUrl = this.isTestnet ? "https://api.hyperliquid-testnet.xyz" : "https://api.hyperliquid.xyz";
   }
   async request(endpoint, payload, signal) {
@@ -122,12 +127,25 @@ var GrpcExchangeTransport = class {
       JSON.stringify(payload.action)
     );
     console.debug("[GrpcExchangeTransport] sending action:", payload.action);
-    const { response } = await this.telegramClient.hyperliquidCoreAction({
-      authData: this.authDataMap,
-      walletId: this.walletId,
-      action: actionBytes,
-      nonce: payload.nonce || Date.now()
-    });
+    let response;
+    try {
+      ({ response } = await this.telegramClient.hyperliquidCoreAction(
+        {
+          authData: {},
+          walletId: this.walletId,
+          action: actionBytes,
+          nonce: payload.nonce || Date.now()
+        },
+        this.rpcOptions
+      ));
+    } catch (err) {
+      if (this.onAuthError && err instanceof Error && /invalid telegram auth data|invalid auth token|missing authorization token/i.test(
+        err.message
+      )) {
+        this.onAuthError();
+      }
+      throw err;
+    }
     if (signal?.aborted) {
       throw new DOMException("Request aborted", "AbortError");
     }
@@ -164,18 +182,53 @@ var GrpcExchangeTransport = class {
 
 // src/HypurrConnectProvider.tsx
 import { jsx } from "react/jsx-runtime";
-var TELEGRAM_STORAGE_KEY = "hypurr-connect-tg-user";
-function toAuthDataMap(data) {
-  const map = {
-    id: String(data.id),
-    first_name: data.first_name,
-    auth_date: String(data.auth_date),
-    hash: data.hash
-  };
-  if (data.last_name) map.last_name = data.last_name;
-  if (data.username) map.username = data.username;
-  if (data.photo_url) map.photo_url = data.photo_url;
-  return map;
+var TELEGRAM_STORAGE_KEY = "hypurr-connect-tg-jwt";
+var LEGACY_TELEGRAM_STORAGE_KEY = "hypurr-connect-tg-user";
+var TELEGRAM_AUTH_STATE_KEY = "hypurr-connect-auth-state";
+var TELEGRAM_AUTH_MESSAGE = "hypurr-connect:telegram-auth";
+var DEFAULT_AUTH_HUB_URL = "https://127.0.0.1:443/login";
+var DEFAULT_TELEGRAM_SCOPES = [
+  "telegram:user:read",
+  "telegram:wallet:read",
+  "telegram:wallet:write",
+  "telegram:trade:read",
+  "telegram:trade:write",
+  "telegram:cabal:read",
+  "telegram:cabal:write",
+  "telegram:agent:write"
+];
+function isInvalidTelegramAuthError(err) {
+  const msg = err instanceof Error ? err.message : typeof err === "object" && err !== null && "message" in err ? String(err.message) : String(err);
+  return /invalid telegram auth data|invalid auth token|missing authorization token/i.test(
+    msg
+  );
+}
+function currentReturnTo() {
+  const url = new URL(window.location.href);
+  for (const param of [
+    "token",
+    "token_type",
+    "token_source",
+    "state",
+    "scope"
+  ]) {
+    url.searchParams.delete(param);
+  }
+  return url.toString();
+}
+function randomState() {
+  const bytes = new Uint8Array(16);
+  crypto.getRandomValues(bytes);
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join(
+    ""
+  );
+}
+function normalizeScopes(scope) {
+  if (Array.isArray(scope)) return scope.join(" ");
+  return scope?.trim() || DEFAULT_TELEGRAM_SCOPES.join(" ");
+}
+function isTelegramAuthMessage(data) {
+  return typeof data === "object" && data !== null && "type" in data && "token" in data && "state" in data && data.type === TELEGRAM_AUTH_MESSAGE && typeof data.token === "string" && typeof data.state === "string";
 }
 var HypurrConnectContext = createContext(null);
 function useHypurrConnect() {
@@ -200,35 +253,103 @@ function HypurrConnectProvider({
 }) {
   const tgClient = useMemo(() => createTelegramClient(config), [config]);
   const staticClient = useMemo(() => createStaticClient(config), [config]);
-  const [tgLoginData, setTgLoginData] = useState(
-    () => {
-      try {
-        const stored = localStorage.getItem(TELEGRAM_STORAGE_KEY);
-        return stored ? JSON.parse(stored) : null;
-      } catch {
-        return null;
-      }
+  const [tgAuthToken, setTgAuthToken] = useState(() => {
+    try {
+      return localStorage.getItem(TELEGRAM_STORAGE_KEY);
+    } catch {
+      return null;
     }
-  );
+  });
   const [tgUser, setTgUser] = useState(null);
   const [tgLoading, setTgLoading] = useState(false);
   const [tgError, setTgError] = useState(null);
-  const authDataMap = useMemo(
-    () => tgLoginData ? toAuthDataMap(tgLoginData) : {},
-    [tgLoginData]
+  const authDataMap = useMemo(() => ({}), []);
+  const telegramRpcOptions = useMemo(
+    () => tgAuthToken ? { meta: { authorization: `Bearer ${tgAuthToken}` } } : void 0,
+    [tgAuthToken]
   );
   const [tgUserTick, setTgUserTick] = useState(0);
+  const onInvalidAuthRef = useRef(null);
+  onInvalidAuthRef.current = () => {
+    console.warn(
+      "[HypurrConnect] Invalid Telegram auth token \u2014 disconnecting."
+    );
+    setTgAuthToken(null);
+    setTgUser(null);
+    setTgError(null);
+    localStorage.removeItem(TELEGRAM_STORAGE_KEY);
+    localStorage.removeItem(LEGACY_TELEGRAM_STORAGE_KEY);
+  };
+  const acceptTelegramToken = useCallback((token) => {
+    setTgAuthToken(token);
+    setTgError(null);
+    localStorage.setItem(TELEGRAM_STORAGE_KEY, token);
+    localStorage.removeItem(LEGACY_TELEGRAM_STORAGE_KEY);
+  }, []);
   useEffect(() => {
-    if (!tgLoginData) return;
+    const params = new URLSearchParams(window.location.search);
+    const token = params.get("token");
+    if (!token) {
+      localStorage.removeItem(LEGACY_TELEGRAM_STORAGE_KEY);
+      return;
+    }
+    const callbackState = params.get("state") ?? "";
+    if (window.opener && window.opener !== window) {
+      window.opener.postMessage(
+        {
+          type: TELEGRAM_AUTH_MESSAGE,
+          token,
+          state: callbackState
+        },
+        window.location.origin
+      );
+      window.close();
+      return;
+    }
+    const expectedState = sessionStorage.getItem(TELEGRAM_AUTH_STATE_KEY);
+    sessionStorage.removeItem(TELEGRAM_AUTH_STATE_KEY);
+    if (!expectedState || callbackState !== expectedState) {
+      setTgError("Invalid auth callback state.");
+      return;
+    }
+    acceptTelegramToken(token);
+    const cleanUrl = new URL(window.location.href);
+    for (const param of [
+      "token",
+      "token_type",
+      "token_source",
+      "state",
+      "scope"
+    ]) {
+      cleanUrl.searchParams.delete(param);
+    }
+    window.history.replaceState({}, document.title, cleanUrl.toString());
+  }, [acceptTelegramToken]);
+  useEffect(() => {
+    function onMessage(event) {
+      if (event.origin !== window.location.origin) return;
+      if (!isTelegramAuthMessage(event.data)) return;
+      const expectedState = sessionStorage.getItem(TELEGRAM_AUTH_STATE_KEY);
+      sessionStorage.removeItem(TELEGRAM_AUTH_STATE_KEY);
+      if (!expectedState || event.data.state !== expectedState) {
+        setTgError("Invalid auth callback state.");
+        return;
+      }
+      acceptTelegramToken(event.data.token);
+    }
+    window.addEventListener("message", onMessage);
+    return () => window.removeEventListener("message", onMessage);
+  }, [acceptTelegramToken]);
+  useEffect(() => {
+    if (!tgAuthToken || !telegramRpcOptions) return;
     let cancelled = false;
     setTgLoading(true);
     setTgError(null);
     (async () => {
       try {
-        const authData = toAuthDataMap(tgLoginData);
         const [{ response: userResp }, { response: walletsResp }] = await Promise.all([
-          tgClient.telegramUser({ authData }),
-          tgClient.telegramUserWallets({ authData })
+          tgClient.telegramUser({ authData: {} }, telegramRpcOptions),
+          tgClient.telegramUserWallets({ authData: {} }, telegramRpcOptions)
         ]);
         if (cancelled) return;
         const user2 = userResp.user ?? null;
@@ -238,6 +359,10 @@ function HypurrConnectProvider({
         setTgUser(user2);
       } catch (err) {
         if (cancelled) return;
+        if (isInvalidTelegramAuthError(err)) {
+          onInvalidAuthRef.current?.();
+          return;
+        }
         console.error("[HypurrConnect] gRPC TelegramUser failed:", err);
         setTgError(err instanceof Error ? err.message : String(err));
       } finally {
@@ -247,13 +372,13 @@ function HypurrConnectProvider({
     return () => {
       cancelled = true;
     };
-  }, [tgLoginData, tgClient, tgUserTick]);
+  }, [tgAuthToken, telegramRpcOptions, tgClient, tgUserTick]);
   const [eoaAddress, setEoaAddress] = useState(null);
   const [agent, setAgent] = useState(null);
   const [eoaLoading, setEoaLoading] = useState(false);
   const [eoaError, setEoaError] = useState(null);
   const eoaSignerRef = useRef(null);
-  const authMethod = tgLoginData ? "telegram" : eoaAddress ? "eoa" : null;
+  const authMethod = tgAuthToken ? "telegram" : eoaAddress ? "eoa" : null;
   const [wallets, setWallets] = useState([]);
   const [selectedWalletId, setSelectedWalletId] = useState(0);
   const [packs, setPacks] = useState([]);
@@ -293,14 +418,20 @@ function HypurrConnectProvider({
     const poll = async () => {
       try {
         const [{ response: twapResp }, { response: scaleResp }] = await Promise.all([
-          tgClient.hyperliquidWalletTwapSessions({
-            authData: authDataMap,
-            walletId: selectedWalletId
-          }),
-          tgClient.hyperliquidWalletScaleSessions({
-            authData: authDataMap,
-            walletId: selectedWalletId
-          })
+          tgClient.hyperliquidWalletTwapSessions(
+            {
+              authData: {},
+              walletId: selectedWalletId
+            },
+            telegramRpcOptions
+          ),
+          tgClient.hyperliquidWalletScaleSessions(
+            {
+              authData: {},
+              walletId: selectedWalletId
+            },
+            telegramRpcOptions
+          )
         ]);
         if (cancelled) return;
         setWallets(
@@ -312,7 +443,11 @@ function HypurrConnectProvider({
             } : w
           )
         );
-      } catch {
+      } catch (err) {
+        if (isInvalidTelegramAuthError(err)) {
+          onInvalidAuthRef.current?.();
+          return;
+        }
       }
     };
     poll();
@@ -321,16 +456,21 @@ function HypurrConnectProvider({
       cancelled = true;
       clearInterval(id);
     };
-  }, [authMethod, selectedWalletId, pollInterval, tgClient, authDataMap]);
+  }, [
+    authMethod,
+    selectedWalletId,
+    pollInterval,
+    tgClient,
+    telegramRpcOptions
+  ]);
   const user = useMemo(() => {
-    if (tgLoginData && authMethod === "telegram" && selectedWallet) {
+    if (tgAuthToken && authMethod === "telegram" && selectedWallet && tgUser) {
       return {
         address: selectedWallet.ethereumAddress,
         walletId: selectedWallet.id,
-        displayName: tgLoginData.username ? `@${tgLoginData.username}` : tgLoginData.first_name,
-        photoUrl: tgLoginData.photo_url,
+        displayName: tgUser.telegramUsername ? `@${tgUser.telegramUsername}` : `Telegram ${tgUser.telegramId}`,
         authMethod: "telegram",
-        telegramId: String(tgLoginData.id),
+        telegramId: String(tgUser.telegramId),
         hfunScore: tgUser?.reputation?.hfunScore,
         reputationScore: tgUser?.reputation?.reputationScore
       };
@@ -344,7 +484,7 @@ function HypurrConnectProvider({
       };
     }
     return null;
-  }, [tgLoginData, selectedWallet, eoaAddress, authMethod, tgUser]);
+  }, [tgAuthToken, selectedWallet, eoaAddress, authMethod, tgUser]);
   const onDeadAgentRef = useRef(
     null
   );
@@ -366,8 +506,9 @@ function HypurrConnectProvider({
       const transport = new GrpcExchangeTransport({
         isTestnet: config.isTestnet ?? false,
         telegramClient: tgClient,
-        authDataMap,
-        walletId: user.walletId
+        rpcOptions: telegramRpcOptions,
+        walletId: user.walletId,
+        onAuthError: () => onInvalidAuthRef.current?.()
       });
       return new ExchangeClient({
         transport,
@@ -522,7 +663,7 @@ function HypurrConnectProvider({
     eoaAddress,
     config.isTestnet,
     tgClient,
-    authDataMap
+    telegramRpcOptions
   ]);
   const handleClearAgent = useCallback(() => {
     if (eoaAddress) {
@@ -532,79 +673,100 @@ function HypurrConnectProvider({
   }, [eoaAddress]);
   const createWallet = useCallback(
     async (name) => {
-      const { response } = await tgClient.hyperliquidWalletCreate({
-        authData: authDataMap,
-        name
-      });
+      const { response } = await tgClient.hyperliquidWalletCreate(
+        {
+          authData: {},
+          name
+        },
+        telegramRpcOptions
+      );
       refreshWallets();
       if (!response.wallet)
         throw new Error("Wallet creation returned no wallet");
       return response.wallet;
     },
-    [tgClient, authDataMap, refreshWallets]
+    [tgClient, telegramRpcOptions, refreshWallets]
   );
   const deleteWallet = useCallback(
     async (walletId) => {
-      await tgClient.hyperliquidWalletDelete({
-        authData: authDataMap,
-        walletId
-      });
+      await tgClient.hyperliquidWalletDelete(
+        {
+          authData: {},
+          walletId
+        },
+        telegramRpcOptions
+      );
       if (walletId === selectedWalletId) {
         const remaining = wallets.filter((w) => w.id !== walletId);
         setSelectedWalletId(remaining[0]?.id ?? 0);
       }
       refreshWallets();
     },
-    [tgClient, authDataMap, selectedWalletId, wallets, refreshWallets]
+    [tgClient, telegramRpcOptions, selectedWalletId, wallets, refreshWallets]
   );
   const createWalletPack = useCallback(
     async (name) => {
-      const { response } = await tgClient.telegramChatWalletPackCreate({
-        authData: authDataMap,
-        name
-      });
+      const { response } = await tgClient.telegramChatWalletPackCreate(
+        {
+          authData: {},
+          name
+        },
+        telegramRpcOptions
+      );
       refreshWallets();
       return response.packId;
     },
-    [tgClient, authDataMap, refreshWallets]
+    [tgClient, telegramRpcOptions, refreshWallets]
   );
   const addPackLabel = useCallback(
     async (params) => {
-      await tgClient.telegramChatWalletPackLabelAdd({
-        authData: authDataMap,
-        ...params
-      });
+      await tgClient.telegramChatWalletPackLabelAdd(
+        {
+          authData: {},
+          ...params
+        },
+        telegramRpcOptions
+      );
       refreshWallets();
     },
-    [tgClient, authDataMap, refreshWallets]
+    [tgClient, telegramRpcOptions, refreshWallets]
   );
   const modifyPackLabel = useCallback(
     async (params) => {
-      await tgClient.telegramChatWalletPackLabelModify({
-        authData: authDataMap,
-        ...params
-      });
+      await tgClient.telegramChatWalletPackLabelModify(
+        {
+          authData: {},
+          ...params
+        },
+        telegramRpcOptions
+      );
       refreshWallets();
     },
-    [tgClient, authDataMap, refreshWallets]
+    [tgClient, telegramRpcOptions, refreshWallets]
   );
   const removePackLabel = useCallback(
     async (params) => {
-      await tgClient.telegramChatWalletPackLabelRemove({
-        authData: authDataMap,
-        ...params
-      });
+      await tgClient.telegramChatWalletPackLabelRemove(
+        {
+          authData: {},
+          ...params
+        },
+        telegramRpcOptions
+      );
       refreshWallets();
     },
-    [tgClient, authDataMap, refreshWallets]
+    [tgClient, telegramRpcOptions, refreshWallets]
   );
   const createTwap = useCallback(
     async (params) => {
-      const { response } = await tgClient.hyperliquidTwapCreate({
-        authData: authDataMap,
-        walletId: selectedWalletId,
-        ...params
-      });
+      const { response } = await tgClient.hyperliquidTwapCreate(
+        {
+          authData: {},
+          walletId: selectedWalletId,
+          ...params
+        },
+        telegramRpcOptions
+      );
       if (!response.session)
         throw new Error("TWAP creation returned no session");
       const session = response.session;
@@ -615,17 +777,19 @@ function HypurrConnectProvider({
       );
       return session;
     },
-    [tgClient, authDataMap, selectedWalletId]
+    [tgClient, telegramRpcOptions, selectedWalletId]
   );
   const modifyTwap = useCallback(
     async (params) => {
-      const { response } = await tgClient.hyperliquidTwapModify({
-        authData: authDataMap,
-        walletId: selectedWalletId,
-        ...params
-      });
-      if (!response.session)
-        throw new Error("TWAP modify returned no session");
+      const { response } = await tgClient.hyperliquidTwapModify(
+        {
+          authData: {},
+          walletId: selectedWalletId,
+          ...params
+        },
+        telegramRpcOptions
+      );
+      if (!response.session) throw new Error("TWAP modify returned no session");
       const session = response.session;
       setWallets(
         (prev) => prev.map(
@@ -639,15 +803,18 @@ function HypurrConnectProvider({
       );
       return session;
     },
-    [tgClient, authDataMap, selectedWalletId]
+    [tgClient, telegramRpcOptions, selectedWalletId]
   );
   const cancelTwap = useCallback(
     async (sessionId) => {
-      await tgClient.hyperliquidTwapCancel({
-        authData: authDataMap,
-        walletId: selectedWalletId,
-        twapSessionId: sessionId
-      });
+      await tgClient.hyperliquidTwapCancel(
+        {
+          authData: {},
+          walletId: selectedWalletId,
+          twapSessionId: sessionId
+        },
+        telegramRpcOptions
+      );
       setWallets(
         (prev) => prev.map(
           (w) => w.id === selectedWalletId ? {
@@ -657,15 +824,18 @@ function HypurrConnectProvider({
         )
       );
     },
-    [tgClient, authDataMap, selectedWalletId]
+    [tgClient, telegramRpcOptions, selectedWalletId]
   );
   const createScale = useCallback(
     async (params) => {
-      const { response } = await tgClient.hyperliquidScaleCreate({
-        authData: authDataMap,
-        walletId: selectedWalletId,
-        ...params
-      });
+      const { response } = await tgClient.hyperliquidScaleCreate(
+        {
+          authData: {},
+          walletId: selectedWalletId,
+          ...params
+        },
+        telegramRpcOptions
+      );
       if (!response.session)
         throw new Error("Scale creation returned no session");
       const session = response.session;
@@ -676,15 +846,18 @@ function HypurrConnectProvider({
       );
       return session;
     },
-    [tgClient, authDataMap, selectedWalletId]
+    [tgClient, telegramRpcOptions, selectedWalletId]
   );
   const cancelScale = useCallback(
     async (sessionId) => {
-      await tgClient.hyperliquidScaleCancel({
-        authData: authDataMap,
-        walletId: selectedWalletId,
-        scaleSessionId: sessionId
-      });
+      await tgClient.hyperliquidScaleCancel(
+        {
+          authData: {},
+          walletId: selectedWalletId,
+          scaleSessionId: sessionId
+        },
+        telegramRpcOptions
+      );
       setWallets(
         (prev) => prev.map(
           (w) => w.id === selectedWalletId ? {
@@ -696,27 +869,56 @@ function HypurrConnectProvider({
         )
       );
     },
-    [tgClient, authDataMap, selectedWalletId]
+    [tgClient, telegramRpcOptions, selectedWalletId]
   );
   const [loginModalOpen, setLoginModalOpen] = useState(false);
   const openLoginModal = useCallback(() => setLoginModalOpen(true), []);
   const closeLoginModal = useCallback(() => setLoginModalOpen(false), []);
-  const loginTelegram = useCallback((data) => {
-    setTgLoginData(data);
-    localStorage.setItem(TELEGRAM_STORAGE_KEY, JSON.stringify(data));
-    setEoaAddress(null);
-    setAgent(null);
-    setEoaError(null);
-  }, []);
+  const loginTelegram = useCallback(() => {
+    const state = randomState();
+    sessionStorage.setItem(TELEGRAM_AUTH_STATE_KEY, state);
+    const configuredReturnTo = config.telegram.returnTo;
+    const returnTo = typeof configuredReturnTo === "function" ? configuredReturnTo() : configuredReturnTo || currentReturnTo();
+    const authUrl = new URL(config.telegram.authHubUrl || DEFAULT_AUTH_HUB_URL);
+    authUrl.searchParams.set("return_to", returnTo);
+    authUrl.searchParams.set("state", state);
+    authUrl.searchParams.set("scope", normalizeScopes(config.telegram.scope));
+    const width = 520;
+    const height = 720;
+    const left = window.screenX + Math.max(0, (window.outerWidth - width) / 2);
+    const top = window.screenY + Math.max(0, (window.outerHeight - height) / 2);
+    const popup = window.open(
+      authUrl.toString(),
+      "hypurr_telegram_auth",
+      [
+        `width=${width}`,
+        `height=${height}`,
+        `left=${Math.round(left)}`,
+        `top=${Math.round(top)}`,
+        "resizable=yes",
+        "scrollbars=yes"
+      ].join(",")
+    );
+    if (popup) {
+      popup.focus();
+      return;
+    }
+    window.location.assign(authUrl.toString());
+  }, [
+    config.telegram.authHubUrl,
+    config.telegram.returnTo,
+    config.telegram.scope
+  ]);
   const connectEoa = useCallback(
     (address, signer) => {
       eoaSignerRef.current = signer ?? null;
       setEoaAddress(address);
-      setTgLoginData(null);
+      setTgAuthToken(null);
       setTgUser(null);
       setTgError(null);
       setEoaError(null);
       localStorage.removeItem(TELEGRAM_STORAGE_KEY);
+      localStorage.removeItem(LEGACY_TELEGRAM_STORAGE_KEY);
       const existing = loadAgent(address);
       if (existing && existing.validUntil > Date.now()) {
         setAgent(existing);
@@ -814,14 +1016,15 @@ function HypurrConnectProvider({
     [eoaAddress, config.isTestnet]
   );
   const logout = useCallback(() => {
-    setTgLoginData(null);
     setTgUser(null);
     setTgError(null);
+    setTgAuthToken(null);
     setEoaAddress(null);
     setAgent(null);
     setEoaError(null);
     eoaSignerRef.current = null;
     localStorage.removeItem(TELEGRAM_STORAGE_KEY);
+    localStorage.removeItem(LEGACY_TELEGRAM_STORAGE_KEY);
   }, []);
   const value = useMemo(
     () => ({
@@ -861,6 +1064,8 @@ function HypurrConnectProvider({
       botUsername: config.telegram?.botUsername ?? "",
       useWidget: config.telegram?.useWidget ?? false,
       authDataMap,
+      authToken: tgAuthToken,
+      telegramRpcOptions,
       telegramClient: tgClient,
       staticClient
     }),
@@ -902,6 +1107,8 @@ function HypurrConnectProvider({
       config.telegram?.botUsername,
       config.telegram?.useWidget,
       authDataMap,
+      tgAuthToken,
+      telegramRpcOptions,
       tgClient,
       staticClient
     ]
@@ -917,7 +1124,6 @@ import {
 } from "framer-motion";
 import {
   useCallback as useCallback2,
-  useEffect as useEffect3,
   useSyncExternalStore
 } from "react";
 
@@ -1048,53 +1254,8 @@ function TelegramColorIcon({ style }) {
   );
 }
 
-// src/TelegramLoginWidget.tsx
-import { useEffect as useEffect2, useRef as useRef2 } from "react";
-import { jsx as jsx4 } from "react/jsx-runtime";
-var WIDGET_SCRIPT_URL = "https://telegram.org/js/telegram-widget.js?22";
-var CALLBACK_NAME = "__hypurrConnectTelegramAuth";
-function TelegramLoginWidget({
-  botUsername,
-  onAuth,
-  buttonSize = "large",
-  cornerRadius,
-  showUserPhoto = true,
-  requestAccess = true
-}) {
-  const containerRef = useRef2(null);
-  const onAuthRef = useRef2(onAuth);
-  onAuthRef.current = onAuth;
-  useEffect2(() => {
-    const container = containerRef.current;
-    if (!container) return;
-    window[CALLBACK_NAME] = (user) => {
-      onAuthRef.current(user);
-    };
-    const script = document.createElement("script");
-    script.src = WIDGET_SCRIPT_URL;
-    script.async = true;
-    script.setAttribute("data-telegram-login", botUsername);
-    script.setAttribute("data-size", buttonSize);
-    script.setAttribute("data-onauth", `${CALLBACK_NAME}(user)`);
-    script.setAttribute("data-userpic", String(showUserPhoto));
-    if (requestAccess) {
-      script.setAttribute("data-request-access", "write");
-    }
-    if (cornerRadius !== void 0) {
-      script.setAttribute("data-radius", String(cornerRadius));
-    }
-    container.innerHTML = "";
-    container.appendChild(script);
-    return () => {
-      container.innerHTML = "";
-      delete window[CALLBACK_NAME];
-    };
-  }, [botUsername, buttonSize, cornerRadius, showUserPhoto, requestAccess]);
-  return /* @__PURE__ */ jsx4("div", { ref: containerRef });
-}
-
 // src/LoginModal.tsx
-import { Fragment, jsx as jsx5, jsxs as jsxs3 } from "react/jsx-runtime";
+import { Fragment, jsx as jsx4, jsxs as jsxs3 } from "react/jsx-runtime";
 var MOBILE_BREAKPOINT = 640;
 var btnStyle = {
   display: "flex",
@@ -1172,7 +1333,7 @@ function HoverButton({
   onClick,
   children
 }) {
-  return /* @__PURE__ */ jsx5(
+  return /* @__PURE__ */ jsx4(
     motion.button,
     {
       type: "button",
@@ -1184,61 +1345,14 @@ function HoverButton({
   );
 }
 function LoginModal({ onConnectWallet, walletIcon }) {
-  const {
-    loginTelegram,
-    loginModalOpen,
-    closeLoginModal,
-    botId,
-    botUsername,
-    useWidget
-  } = useHypurrConnectInternal();
-  const handleTelegramAuth = useCallback2(
-    (user) => {
-      loginTelegram(user);
-      closeLoginModal();
-    },
-    [loginTelegram, closeLoginModal]
-  );
-  useEffect3(() => {
-    if (!loginModalOpen) return;
-    function onMessage(e) {
-      if (e.origin !== "https://oauth.telegram.org") return;
-      try {
-        const data = typeof e.data === "string" ? JSON.parse(e.data) : e.data;
-        if (data?.event === "auth_result" && data.result) {
-          const r = data.result;
-          handleTelegramAuth({
-            id: r.id,
-            first_name: r.first_name ?? "",
-            last_name: r.last_name ?? void 0,
-            username: r.username ?? void 0,
-            photo_url: r.photo_url ?? void 0,
-            auth_date: r.auth_date,
-            hash: r.hash
-          });
-        }
-      } catch {
-      }
-    }
-    window.addEventListener("message", onMessage);
-    return () => window.removeEventListener("message", onMessage);
-  }, [loginModalOpen, handleTelegramAuth]);
-  const openTelegramOAuth = useCallback2(() => {
-    const origin = encodeURIComponent(window.location.origin);
-    const url = `https://oauth.telegram.org/auth?bot_id=${botId}&origin=${origin}&request_access=write`;
-    const w = 550;
-    const h = 470;
-    const left = window.screenX + (window.outerWidth - w) / 2;
-    const top = window.screenY + (window.outerHeight - h) / 2;
-    window.open(
-      url,
-      "telegram_auth",
-      `width=${w},height=${h},left=${left},top=${top}`
-    );
-  }, [botId]);
+  const { loginTelegram, loginModalOpen, closeLoginModal } = useHypurrConnectInternal();
+  const handleTelegramAuth = useCallback2(() => {
+    closeLoginModal();
+    loginTelegram();
+  }, [loginTelegram, closeLoginModal]);
   const isMobile = useIsMobile();
   const modalContent = /* @__PURE__ */ jsxs3(Fragment, { children: [
-    /* @__PURE__ */ jsx5(
+    /* @__PURE__ */ jsx4(
       "div",
       {
         style: {
@@ -1249,19 +1363,13 @@ function LoginModal({ onConnectWallet, walletIcon }) {
           gap: 8,
           overflow: "hidden"
         },
-        children: useWidget && botUsername ? /* @__PURE__ */ jsx5(
-          TelegramLoginWidget,
-          {
-            botUsername,
-            onAuth: handleTelegramAuth
-          }
-        ) : /* @__PURE__ */ jsxs3(HoverButton, { onClick: openTelegramOAuth, children: [
-          /* @__PURE__ */ jsx5(TelegramColorIcon, { style: iconSize }),
+        children: /* @__PURE__ */ jsxs3(HoverButton, { onClick: handleTelegramAuth, children: [
+          /* @__PURE__ */ jsx4(TelegramColorIcon, { style: iconSize }),
           "Telegram"
         ] })
       }
     ),
-    /* @__PURE__ */ jsx5("div", { style: dividerStyle }),
+    /* @__PURE__ */ jsx4("div", { style: dividerStyle }),
     /* @__PURE__ */ jsxs3(
       HoverButton,
       {
@@ -1270,14 +1378,14 @@ function LoginModal({ onConnectWallet, walletIcon }) {
           onConnectWallet();
         },
         children: [
-          walletIcon ?? /* @__PURE__ */ jsx5(MetaMaskColorIcon, { style: iconSize }),
+          walletIcon ?? /* @__PURE__ */ jsx4(MetaMaskColorIcon, { style: iconSize }),
           "Wallet"
         ]
       }
     )
   ] });
-  return /* @__PURE__ */ jsx5(AnimatePresence, { children: loginModalOpen && (isMobile ? /* @__PURE__ */ jsx5(MobileDrawer, { onClose: closeLoginModal, children: modalContent }, "drawer") : /* @__PURE__ */ jsxs3(Fragment, { children: [
-    /* @__PURE__ */ jsx5(
+  return /* @__PURE__ */ jsx4(AnimatePresence, { children: loginModalOpen && (isMobile ? /* @__PURE__ */ jsx4(MobileDrawer, { onClose: closeLoginModal, children: modalContent }, "drawer") : /* @__PURE__ */ jsxs3(Fragment, { children: [
+    /* @__PURE__ */ jsx4(
       motion.div,
       {
         style: backdropStyle,
@@ -1289,7 +1397,7 @@ function LoginModal({ onConnectWallet, walletIcon }) {
       },
       "backdrop"
     ),
-    /* @__PURE__ */ jsx5(
+    /* @__PURE__ */ jsx4(
       motion.div,
       {
         style: modalWrapperStyle,
@@ -1302,13 +1410,13 @@ function LoginModal({ onConnectWallet, walletIcon }) {
           motion.div,
           {
             style: modalBoxStyle,
-            initial: { opacity: 0, scale: 0.95, y: 10 },
-            animate: { opacity: 1, scale: 1, y: 0 },
-            exit: { opacity: 0, scale: 0.95, y: 10 },
-            transition: { duration: 0.2, ease: "easeOut" },
+            initial: { scale: 0.96, opacity: 0, y: 8 },
+            animate: { scale: 1, opacity: 1, y: 0 },
+            exit: { scale: 0.96, opacity: 0, y: 8 },
+            transition: { duration: 0.12 },
             onClick: (e) => e.stopPropagation(),
             children: [
-              /* @__PURE__ */ jsx5("p", { style: headingStyle, children: "Connect" }),
+              /* @__PURE__ */ jsx4("h2", { style: headingStyle, children: "Connect" }),
               modalContent
             ]
           }
@@ -1375,7 +1483,7 @@ function MobileDrawer({
     [onClose, controls]
   );
   return /* @__PURE__ */ jsxs3(Fragment, { children: [
-    /* @__PURE__ */ jsx5(
+    /* @__PURE__ */ jsx4(
       motion.div,
       {
         style: backdropStyle,
@@ -1400,9 +1508,9 @@ function MobileDrawer({
         dragElastic: { top: 0, bottom: 0.4 },
         onDragEnd: handleDragEnd,
         children: [
-          /* @__PURE__ */ jsx5("div", { style: drawerBgStyle }),
-          /* @__PURE__ */ jsx5("div", { style: grabHandleAreaStyle, children: /* @__PURE__ */ jsx5("div", { style: grabHandleStyle }) }),
-          /* @__PURE__ */ jsx5("p", { style: headingStyle, children: "Connect" }),
+          /* @__PURE__ */ jsx4("div", { style: drawerBgStyle }),
+          /* @__PURE__ */ jsx4("div", { style: grabHandleAreaStyle, children: /* @__PURE__ */ jsx4("div", { style: grabHandleStyle }) }),
+          /* @__PURE__ */ jsx4("p", { style: headingStyle, children: "Connect" }),
           children
         ]
       },
@@ -1423,7 +1531,6 @@ export {
   GrpcExchangeTransport,
   HypurrConnectProvider,
   LoginModal,
-  TelegramLoginWidget,
   createEoaSigner,
   createStaticClient,
   createTelegramClient,